Who we are
Richsel Legacy Foundation LBG (“the Foundation”, “we”, “us”) is a non-profit company limited by guarantee, registered in Ghana, with an office in the United States. We run programmes in clean water and sanitation, women’s empowerment, care for the vulnerable, and afforestation. For the personal information described here, the Foundation is the data controller.
What we collect
- Donation details. When you donate, we record your name (if you give it), email address (if you give it), phone number (if you give it), the amount, currency, date, the project you chose, whether the gift is one-off or monthly, and the payment method type (for example “card ending 4081” or “MTN Mobile Money”). Payments are processed by Paystack. We never see or store your full card number, CVV, or mobile money PIN. These are entered on Paystack’s secure checkout. See also our Terms of Service, which covers donations and our refund policy.
- WhatsApp conversations. If you message us on WhatsApp, we receive your phone number, your WhatsApp profile name and the messages you send.
- Newsletter sign-ups. If you subscribe to updates, we store your email address and the date you subscribed.
- Essential browser storage. We save your light or dark theme choice in your browser’s local storage. Our staff sign-in uses a secure session cookie, which is only set for Foundation staff using the admin area. We do not use advertising or tracking cookies.
- Basic technical data. Our hosting provider keeps standard server logs (such as IP address and browser type) for security. To prevent abuse of the donation form, we store a one-way scrambled (hashed) form of your IP address, never the address itself.
Why we use it
- To process your donation and confirm that it went through.
- To manage monthly gifts, including letting you change or cancel them.
- To keep accurate financial records, as the law requires.
- To report on how funds are used, for example totals for each project. These reports never name donors without permission.
- To reply when you contact us on WhatsApp.
- To send you updates, but only if you asked for them.
- To protect our website and donors from fraud and misuse.
We rely on your consent (newsletter, WhatsApp), on what is needed to carry out your donation, on our legal obligations (financial records) and on our legitimate interest in running a secure, accountable charity. We never sell or rent your personal information.
Paystack, our payment processor
Donations are handled by Paystack Payments Limited, a licensed payment processor. Paystack collects your payment details directly and processes them under its own privacy policy, which you can read at paystack.com. Paystack may send you a payment receipt. It shares with us only what we need to confirm and record your gift.
We also use trusted service providers to run the website: hosting (Vercel), our database (Aiven) and image hosting. They process data only on our instructions. Some of these providers store data outside Ghana, for example in the European Union or the United States. Where that happens, we rely on their contractual data protection commitments.
How long we keep it
- Donation records: for as long as financial and tax law requires, normally up to seven years after the donation, then deleted or anonymised.
- Newsletter emails: until you unsubscribe or ask us to remove you.
- WhatsApp conversations: for as long as needed to deal with your enquiry, and no longer than two years after our last message, unless they relate to a donation record.
- Security logs: a few months at most.
Your rights
Under Ghana’s Data Protection Act, 2012 (Act 843), you have the right to:
- ask whether we hold personal information about you and get a copy of it;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information, except where we must keep it by law (for example, financial records of donations);
- object to us using your information for updates or newsletters;
- complain to Ghana’s Data Protection Commission if you think we have handled your information wrongly.
Donors in the United States: we handle your information in the same way and give you the same rights to access, correct and delete it. Depending on the state you live in, you may have further rights under state privacy laws. Contact us and we will help. We do not sell personal information.
We will reply to a request within one month, and may ask you to confirm your identity first so that we only give information to the right person.
Children
Our website is not aimed at children, and we do not knowingly accept donations or newsletter sign-ups from anyone under 18.
Keeping your information safe
Our website uses encrypted connections (HTTPS). Access to donor records is limited to authorised Foundation staff with individual accounts. Payment details stay with Paystack.
How to contact us
For any privacy question or request, message us on WhatsApp at +233 20 718 3615. Please start your message with “Privacy request” so it reaches the right person.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it last changed. Significant changes will be highlighted on our website.
Last updated 22 October 2026.