Your information, handled with care.

This website is run by Blessing Chukwu Foundation, founded by Blessing Nkiruka Chukwu Akunne and based in Reykjavík, Iceland. We decide how and why the personal information described here is used, which makes us its “controller” under data protection law, including the EU General Data Protection Regulation (GDPR) as it applies in Iceland through the Icelandic Act on Data Protection, No. 90/2018.

For anything about your information, use our contact form (choose “Something else”).

When you use the contact form we receive your name, your email address, the topic you choose, and your message.

• We store your message so the Foundation’s team can read and answer it, and email a copy to the people who handle enquiries.
• We send you a short automatic email confirming we received it. It doesn’t repeat what you wrote. If someone else enters your address, you’ll get at most two of these a day, and you can ignore them.
• We use your email address only to reply to you about your message.

Why we’re allowed to: it’s in our legitimate interest, and yours, to answer the questions people send us (GDPR Article 6(1)(f)). If your message is about volunteering, partnering or giving, we may also use it to take steps you’ve asked for (Article 6(1)(b)).

The form contains an invisible field and notes how long the form took to fill in. Both are used only in the moment to filter out automated spam and are not stored.

Donations made with the Give button on this site are processed by PayPal. You pay in PayPal’s own secure window, with your PayPal account or a debit or credit card. We never see or store your card details.

When a gift is completed, PayPal shares with us:

• your name, email address and country;
• your PayPal payer reference and whether you paid by PayPal balance or card (not the card number);
• the amount, PayPal’s fee, the date, and PayPal’s transaction references, plus any later refund or reversal.

We use this to record and acknowledge your gift, email you a thank-you with your receipt details, alert the team that a gift arrived, handle refunds or payment questions, and keep the financial records we are legally required to keep.

Why we’re allowed to: processing your gift is something you’ve asked us to do (Article 6(1)(b)); keeping financial records is a legal obligation (Article 6(1)(c)); and thanking donors and preventing fraud are legitimate interests (Article 6(1)(f)).

PayPal is responsible for the payment itself and handles your payment information under its own privacy statement.

We don’t use analytics, advertising or tracking tools, and we don’t build profiles of visitors. Our fonts are served from our own site, not from Google.

Like any website, the computers that host the site receive technical information with each request, such as your IP address, browser type and the page requested. Our hosting provider uses this to deliver the site and keep it secure. To stop abuse of our forms and payment pages, our servers briefly keep a count of recent requests per IP address in memory; these counts are never written to a database and expire within minutes or, at most, a day.

• PayPal’s code is only loaded when you choose an amount and continue to give. From then on, PayPal processes information about your visit under its own privacy statement.
• TikTok videos on the Impact page only load TikTok’s player when you press play. The preview pictures for those videos are shown directly from TikTok’s servers, so TikTok can see that your browser requested them, including your IP address. See TikTok’s privacy policy.
• GoFundMe: the Give page can show our GoFundMe fundraiser’s progress, but only after you choose “Show our GoFundMe progress”. GoFundMe then processes information about your visit, and any gift you make there, under its own privacy notice. We don’t receive details of people who give through GoFundMe.
• Links to our social media profiles take you to those platforms, which have their own privacy policies. Nothing is loaded from them until you follow a link.

The public website doesn’t set any cookies and doesn’t store anything in your browser, so there’s no cookie banner. If you choose to give through PayPal, show our GoFundMe progress, or play a TikTok video, those services may set their own cookies, as described in their policies.

The Foundation’s staff sign in to a private administration area, which uses one essential cookie to keep them signed in. Visitors never receive it.

We use a small number of service providers who process information only on our instructions:

• Vercel (United States): hosts the website and the photos on it.
• Turso (database service, hosted on Amazon Web Services in the United States): stores contact messages and donation records.
• Brevo (France): sends our emails, including confirmations, thank-yous and team alerts.

PayPal processes payments as a separate, independent controller. We may also share information if the law requires it, for example with tax or auditing authorities. We never sell your information or share it for marketing.

Some of our providers store or process information in the United States. Where that happens, we rely on the safeguards GDPR allows, such as the European Commission’s Standard Contractual Clauses or the EU–U.S. Data Privacy Framework, so your information keeps a comparable level of protection. You can ask us for details.

Under data protection law you can ask us to:

• see the information we hold about you and get a copy;
• correct anything that’s wrong or incomplete;
• delete your information;
• limit how we use it, or object to our using it on the basis of legitimate interests;
• receive information you gave us in a portable, machine-readable form.

To make a request, use our contact form (choose “Something else”). We’ll answer within one month, and it’s free. We may need to confirm it’s really you before we share or change anything. We’ll delete contact messages on request. Donation records we must keep by law can’t be deleted before the end of their retention period, but we’ll stop using them for anything else.

If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You also have the right to complain to the Icelandic Data Protection Authority, Persónuvernd, or to the data protection authority where you live.

The site is served only over encrypted connections. Contact messages and donation records can only be seen by Foundation staff with a personal account. Donor details are limited to administrators, and every export or deletion is recorded in an audit log. Card details never reach us at all.

This website isn’t aimed at children, and donations through PayPal require an adult account holder. If you believe a child has sent us their information, please get in touch and we’ll delete it.

If we change how we handle personal information, we’ll update this page and the date below. This policy was last updated on 3 October 2026.