Privacy Policy

Who we are

FRACAD Fundraising Academy ("FRACAD", "we", "us") runs fracad.com. We are the data controller for the personal data described here. [Legal entity name and registered address to be confirmed.]

Contact for any privacy question or request: support@fracad.com.

What we collect

Details you give us when you use a free tool, apply or sign up: your name, email address, WhatsApp number (optional on our free tools), country, organisation name and type, sector, stage, revenue band and funding target.
Your assessment answers and scores from the Grant Readiness Score, Due Diligence Assessment and Funder Fit Scorer. These are only sent to us when you submit your details.
Purchase details when you pay. Payments are processed by Paystack or Stripe. We do not see or store your full card details.
Usage data such as pages visited, device, browser and the ad or link that brought you here (UTM tags). Analytics and ads cookies are only set if you click Accept on our cookie banner.

Why we use it, and our lawful basis

To send you your results and report, and to deliver programs you buy (contract, or steps at your request before a contract).
To email you, or WhatsApp you if you gave a number, about relevant FRACAD programs and resources (your consent, which you can withdraw at any time).
To understand how the site is used and measure our ads (your consent, through the cookie banner).
To keep records required by law, such as tax and accounting records (legal obligation).

Who processes your data for us

We use trusted service providers who process data on our instructions:

Brevo (Sendinblue SAS, France): our email and contact database.
Netlify (USA): website hosting and form handling.
PostHog (USA): product analytics, only with your consent.
Google Analytics (Google LLC, USA): website analytics, only with your consent.
Meta (Meta Platforms, USA and Ireland): ads measurement through the Meta Pixel and Conversions API, only with your consent.
Paystack and Stripe: payment processing.

We do not sell your personal data.

International transfers

Some of these providers store data outside Nigeria, including in the European Union and the United States. Where we transfer data abroad, we rely on safeguards recognised under the NDPA, such as the provider's contractual commitments and adequate protection in the receiving country.

How long we keep it

Leads and assessment results: until you unsubscribe or ask us to delete them, and in any case no longer than [24 months] after your last interaction. Customer and payment records: as long as the law requires, usually [6 years]. [Retention periods to be confirmed.]

Your rights

Under the NDPA and similar laws you can ask to access, correct, delete or move your data, object to or restrict how we use it, and withdraw consent at any time. Every marketing email has an unsubscribe link. To make a request, email support@fracad.com. We will reply within 30 days.

If you are not satisfied, you can complain to the Nigeria Data Protection Commission (NDPC), or to your local data protection authority if you live elsewhere.

Cookies

We only set essential storage needed for the site to work (for example remembering your currency or cookie choice) unless you click Accept. If you accept, Google Analytics, PostHog and the Meta Pixel may set cookies to measure visits and ads. You can change your choice at any time with .

Security

We use HTTPS, access controls and reputable providers to protect your data. No system is perfectly secure, so if we ever have a breach that puts you at risk, we will tell you and the regulator as the law requires.

Children

Our services are for adults running or building organisations. We do not knowingly collect data from children under 18.

Changes

We may update this policy. We will post the new version here with a new date.