LEGAL & DATA PROTECTION
Privacy Policy
1. Data Minimisation & Purpose Limitation
NGOFlow Africa collects only the account and organisational information required to authenticate users, isolate multi-tenant workspaces, and deliver operational tools.
2. Beneficiary Safeguarding & NDPA 2023 Alignment
Tenant organisations remain data controllers of their operational records. NGOFlow enforces mandatory informed-consent tracking, application-level encryption for sensitive beneficiary identifiers, role-based safeguarding redaction, and right-to-erasure anonymisation workflows.
3. Public Website Content Isolation
Internal project budgets, donor contracts, beneficiary registries, and verification files are never exposed to public NGO websites unless sanitized summaries are explicitly approved for publication by an authorised administrator.