West & Central Africa Health Options Ltd/GTE (“WCAHealth”, “we”, “our”, or “us”) is committed to protecting the privacy, confidentiality, and security of personal data entrusted to us. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information obtained through our website, programmes, partnerships, events, and other engagements.
This policy applies to all visitors, partners, donors, contractors, consultants, job applicants, beneficiaries, and any individual whose personal data we process.
Who we Are
WCAHealth is a Nigerian-registered not-for-profit company limited by guarantee (RC 7509233), working to strengthen health systems and improve health outcomes across Nigeria and Africa.
We act as a Data Controller for personal data collected through our website and organisational activities.
Legal and Regulatory Framework
We process personal data in accordance with:
- Nigeria Data Protection Act (NDPA) 2023
- Nigeria Data Protection Regulation (NDPR)
- UK General Data Protection Regulation (UK GDPR), where applicable
- EU General Data Protection Regulation (GDPR), where applicable
- Donor and partner data protection requirements
- Applicable contractual, ethical, and safeguarding obligations
Where conflicts arise, the highest standard of data protection applies.
Information We Collect
We may collect the following categories of personal data:
- Information You Provide Directly
- Name, email address, phone number
- Organisation and job title
- Messages submitted via contact forms
- Job or consultancy application details (CVs, cover letters, references)
- Event registrations and participation details
- Automatically Collected Information
- IP address
- Browser type and device information
- Pages visited and interaction data
- Cookies and similar tracking technologies
- Programme and Partnership Data
- Professional details of partners, consultants, and collaborators
- Limited beneficiary or community-level data collected strictly for programme delivery, monitoring, evaluation, research, and learning (MERL)
- Aggregated and anonymised health or service data
We do not intentionally collect sensitive personal data unless required for legitimate programme purposes and with appropriate safeguards.
Lawful Basis for Processing
We process personal data on one or more of the following legal bases:
- Consent – where you have explicitly agreed
- Contractual necessity – to perform obligations under agreements
- Legal obligation – to comply with laws and regulations
- Legitimate interests – where processing supports our mission and does not override individual rights
- Public interest – for health systems strengthening, research, and development programming
How We Use Your Information
We use personal data to:
- Respond to enquiries and communications
- Deliver programmes and technical assistance
- Manage partnerships, grants, and donor reporting
- Recruit staff, consultants, and volunteers
- Improve our website, services, and user experience
- Comply with legal, financial, and safeguarding obligations
- Produce anonymised reports, insights, and learning outputs
We do not sell or trade personal data.
Cookies and Analytics
Our website uses cookies to:
- Enable core website functionality
- Understand how visitors use our site
- Improve performance and accessibility
You may manage or disable cookies through your browser settings. Some features may not function correctly if cookies are disabled.
Data Sharing and Disclosure
We may share personal data only when necessary and under strict controls, including with:
- Donors and funding partners (in line with agreements)
- Programme partners and government stakeholders
- Professional service providers (IT, legal, audit)
- Regulatory or law enforcement authorities, where legally required
All third parties are required to adhere to appropriate data protection and confidentiality standards.
International Data Transfers
Where personal data is transferred outside Nigeria, the UK, or the EU, we ensure appropriate safeguards are in place, including:
- Data protection agreements
- Standard contractual clauses
- Donor-mandated data security controls
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, contractual, and reporting obligations. Data is securely deleted or anonymised when no longer required.
Data Security
We implement technical and organisational measures to protect personal data, including:
- Secure servers and access controls
- Encryption and password protection
- Staff training on data protection and safeguarding
- Incident response and breach management procedures
Your Rights
Subject to applicable law, you have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Restrict or object to processing
- Withdraw consent at any time
- Lodge a complaint with a data protection authority
Requests can be made using the contact details below.
Safeguarding and Children’s Data
WCAHealth is committed to safeguarding children and vulnerable adults. We apply heightened protections to any data relating to minors and vulnerable populations and process such data strictly in line with safeguarding policies and ethical approvals.
Changes to This Policy
We may update this Privacy Policy periodically. Updates will be published on this page with a revised effective date.
Contact Us
For privacy-related enquiries or data requests, contact:
Data Protection Lead
West & Central Africa Health Options Ltd/GTE
Email: info@wcafricahealth.org
Effective Date: [16th January 2026]
Last Updated: [16th January 2026]