Last updated: 24 September 2026

1. Introduction

Abounding Grace Foundation ("AGF", "we", "us", or "our") is a non-profit organisation dedicated to rehabilitating prisoners and ex-convicts across Nigeria, Ghana and the United Kingdom through our RRR model of Rehabilitation, Reformation, and Re-Integration. We are registered and operate in the United Kingdom, Nigeria, and Ghana.

This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website, make a donation, apply to volunteer, sign up for our newsletter, contact us, or otherwise interact with us. We are committed to protecting your privacy and handling your data in an open and transparent manner.

By using our website or otherwise providing us with your personal information, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our website or provide us with your personal information.

2. Who We Are and How to Contact Us

For the purposes of applicable data protection law, Abounding Grace Foundation is the data controller of the personal information described in this policy.

• Email: info@prisonervoice.com
• United Kingdom office: 22 Dartford Street, London, SE17 3UD — +44 737 604 5293
• Nigeria office: Close 47, VGC, Lagos — +234 810 537 3381
• Ghana office: 105 Haasto Road, North Legon, Accra — +233 552 349 630

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.

3. Information We Collect

We collect information in the following ways:

3.1 Information you give us directly

• Account information: name, email address, password, and phone number when you register for an account.
• Donation information: name, email address, billing address, and donation amount when you make a donation. Card and payment details are collected and processed directly by our payment partners (see Section 6 below) — we do not store your full card details on our servers.
• Volunteer and job applications: name, contact details, CV/resume, cover letter, and any other information you choose to include in an application submitted through our Volunteer Opportunities page or volunteer application form.
• Community and discussion activity: posts, comments, and messages you submit when joining a community or discussion feature on our site.
• Contact form and correspondence: your name, email address, subject, and message when you contact us through our contact form, email, or phone.
• Newsletter sign-up: your email address when you subscribe to our newsletter.
• Event bookings: your name and contact details when you register to attend an event.

3.2 Information we collect automatically

• Usage data: pages visited, time spent on the site, links clicked, referring website, browser type, device type, and IP address.
• Cookies and similar technologies: as described in Section 7 below.

3.3 Information about the individuals we serve

As part of our rehabilitation, mentorship, and re-integration programmes, we may collect limited information about prisoners and ex-convicts we work with directly through our outreach programmes (for example, first names, general circumstances, and programme progress notes) with appropriate consent and safeguarding measures. This information is collected offline, through our programme staff and volunteers, handled with strict confidentiality, and is not published on this website without explicit consent (success stories and testimonials published on our site are shared only with the individual's informed consent, and we may use first names only or anonymise details on request).

4. How We Use Your Information

We use the personal information we collect to:

• Process and receipt your donations, and issue tax documentation where applicable;
• Create and manage your user account and provide you with access to donor/volunteer dashboards;
• Process volunteer and job applications and communicate with you about opportunities;
• Respond to your enquiries, comments, and requests submitted through our contact form or by email;
• Send you our newsletter, updates on our programmes, and impact reports, where you have opted in to receive these;
• Facilitate community features, event registrations, and discussions you choose to participate in;
• Improve our website, services, and programmes through analysis of usage data;
• Detect, prevent, and address fraud, security issues, or technical problems;
• Comply with our legal, regulatory, and accounting obligations, including those relating to charitable donations.

5. Legal Basis for Processing

Where UK GDPR, the Nigeria Data Protection Act 2023, or the Ghana Data Protection Act 2012 applies, we rely on the following legal bases to process your personal information:

• Consent: where you have given clear consent, for example when subscribing to our newsletter or submitting a testimonial for publication.
• Contract: where processing is necessary to fulfil a donation, volunteer application, or other service you have requested from us.
• Legal obligation: where we must process your information to comply with financial, tax, or charity regulation requirements.
• Legitimate interests: where processing is necessary for our legitimate interests as a charity — such as improving our website, communicating with supporters, and safeguarding our beneficiaries — provided these interests are not overridden by your rights and freedoms.

6. Payment Processing and Third-Party Services

We use trusted third-party payment processors, which may include Paystack, Stripe, PayPal, and Flutterwave, to securely process donations. When you make a donation, your payment card details are transmitted directly to and processed by these providers in accordance with their own privacy policies and security standards (including PCI-DSS compliance). We do not store your full payment card number, CVV, or expiry date on our servers.

We also use trusted third-party service providers for functions such as website hosting, email delivery, analytics, and spam/fraud prevention (including Google reCAPTCHA). These providers process personal information on our behalf and are required to protect it in accordance with this Privacy Policy and applicable law.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to operate correctly, remember your preferences, and understand how visitors use our site. Cookies are small text files stored on your device.

We use the following categories of cookies:

• Strictly necessary cookies: required for the website to function, such as maintaining your login session and shopping/donation cart state.
• Functional cookies: remember your preferences, such as your selected language or currency.
• Analytics cookies: help us understand how visitors interact with our website so we can improve it (for example, Google Analytics).

You can control or delete cookies through your browser settings at any time. Please note that disabling cookies may affect the functionality of parts of our website, including the donation process.

8. How We Share Your Information

We do not sell your personal information. We may share your information with:

• Payment processors (Paystack, Stripe, PayPal, Flutterwave) to process donations;
• Service providers who help us operate our website, send communications, or process data on our behalf, under contractual obligations to protect your data;
• Partner organisations involved in delivering our rehabilitation, legal aid, or outreach programmes, where necessary and with appropriate safeguards;
• Regulators, auditors, and legal authorities where required by law, to protect our rights, or to comply with a legal process;
• Professional advisers such as our lawyers, auditors, and accountants, where necessary for their services to us.

9. International Data Transfers

Because Abounding Grace Foundation operates across the United Kingdom, Nigeria, and Ghana, your personal information may be transferred to, stored, and processed in a country other than the one in which you are located. Where we transfer personal information internationally, we take appropriate steps to ensure it receives an adequate level of protection, including through contractual safeguards, in accordance with UK GDPR and other applicable data protection laws.

10. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this policy, including to satisfy any legal, accounting, or reporting requirements. Donation records are typically retained for the period required by applicable tax and charity regulations. Volunteer and job application information is retained for the duration of the recruitment process and a reasonable period afterwards, unless you ask us to delete it sooner or you are engaged in an ongoing role with us. You may ask us to delete your personal information at any time, subject to Section 11 below.

11. Your Rights

Depending on where you are located, you may have some or all of the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you;
• Rectification: ask us to correct inaccurate or incomplete information;
• Erasure: ask us to delete your personal information, subject to certain exceptions;
• Restriction: ask us to restrict how we use your information;
• Portability: request a copy of your information in a structured, machine-readable format;
• Objection: object to our processing of your information, including for direct marketing;
• Withdraw consent: withdraw your consent at any time where we rely on consent to process your information, such as newsletter subscriptions.

To exercise any of these rights, please contact us at info@prisonervoice.com. We will respond to your request within the timeframe required by applicable law.

If you are not satisfied with how we have handled your personal information, you have the right to lodge a complaint with the relevant supervisory authority: the Information Commissioner's Office (ICO) in the United Kingdom, the Nigeria Data Protection Commission (NDPC) in Nigeria, or the Data Protection Commission in Ghana.

12. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), secure payment processing through PCI-DSS compliant providers, access controls, and regular review of our security practices. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

13. Children's Privacy

Our website and donation services are not directed at children under the age of 16, and we do not knowingly collect personal information from children through our website. Where our outreach and youth crime prevention programmes involve young people, information is collected offline through appropriate safeguarding procedures, parental/guardian consent, and child protection policies, separate from this website.

14. Marketing Communications

Where you have opted in to receive our newsletter or marketing communications, you may opt out at any time by clicking the "unsubscribe" link in any email we send you, or by contacting us at info@prisonervoice.com. We will continue to send you non-marketing communications, such as donation receipts and responses to your enquiries, even if you opt out of marketing.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Abounding Grace Foundation
Email: info@prisonervoice.com
United Kingdom: 22 Dartford Street, London, SE17 3UD — +44 737 604 5293
Nigeria: Close 47, VGC, Lagos — +234 810 537 3381
Ghana: 105 Haasto Road, North Legon, Accra — +233 552 349 630