Privacy Policy

1. Who we are and this policy

Equitable Medicaid and Clinical Research Ltd/Gte (EMCR) operates this website. This policy explains how EMCR handles personal information collected through the website. A separate privacy notice or consent form may apply to a particular clinical study, programme, employment process, grant, event, or service; that notice supplements this policy and takes priority for the activity it describes.

2. Information the website may collect

Depending on how you use the site, we may collect your name, email address, telephone number, country or location, message, and communication preferences. Contact forms collect the details you submit. Newsletter forms collect a name and an email address or phone number. Event registrations collect attendee details and ticket quantity. Donation forms collect contact details you provide, donation amount and currency, project selection, stated giving frequency, message, and payment status or reference.

Volunteer accounts and profiles may include account credentials, date of birth, contact and location details, education, interests, biography, profile image, and bank details you choose to provide for applicable volunteer payments. Grant applications may include an organization and contact person, country, project information, requested amount, and supporting documents. Job applications may include contact details, a headshot, and a CV or résumé. We also receive information you provide in account, event, application-status, and support requests.

When you browse the site, the hosting and security systems may process technical information such as your IP address, browser, device, requested pages, and timestamps. The site uses essential session and security cookies, a cookie-choice cookie remembered for up to six months, and browser storage to remember which public update notices you have read.

3. How we use information

We use information to answer enquiries; create and administer volunteer accounts; review volunteer, job, and grant applications; manage events; record and verify donations or ticket payments; provide requested services; send operational messages; manage subscriptions; maintain security; prevent fraud or misuse; and meet legal or record-keeping obligations. We use information only for purposes reasonably connected to your interaction with EMCR, or as otherwise explained when it is collected.

The applicable legal basis depends on the activity. It may include your consent, steps you ask us to take, performance of a service or agreement, a legal obligation, or a legitimate interest such as protecting the site and administering EMCR programmes. Where we rely on consent, you may withdraw it; withdrawal does not make earlier processing unlawful.

4. Updates and subscriptions

The website provides email and phone update subscriptions, with an unsubscribe option. Event registration, volunteer registration, and job application flows may also add the submitted contact details to EMCR updates. You can unsubscribe using the link in an update message or contact us through the Contact Us page. Unsubscribing from updates does not cancel an event registration, volunteer account, job application, or necessary service messages.

5. Cookies and browser storage

Essential cookies support functions such as secure sessions, form protection, and account access. The cookie banner records whether you accepted or declined and remembers that choice for up to six months; either choice leaves access to the website unchanged. Browser storage also remembers which public update notices you have read. You can clear cookies or browser storage through your browser settings; some essential site functions may then ask you to sign in again or restore a preference.

6. When information is shared

Access is limited to EMCR personnel and administrators who need information for their responsibilities. We may use service providers for website hosting, secure file storage, communications, and payment processing. If you make a payment, the selected provider (currently Paystack or Flutterwave when configured) processes the payment under its own terms and privacy notice. EMCR records the payment amount, status, and provider reference; payment credentials are entered with the provider, not into EMCR’s website forms.

We may disclose information when required by law, to respond to lawful requests, protect people or the site, or establish or defend legal claims. Some pages link to or embed third-party services, such as maps or video. Those services may receive technical information when you open or load them and are governed by their own privacy terms. EMCR does not sell personal information for payment.

7. Retention and security

We keep information only for as long as reasonably needed for the purpose it was collected, to administer an account or application, meet financial or other legal requirements, resolve disputes, and protect the site. Retention periods vary by record type. When information is no longer required, we will delete it or take reasonable steps to de-identify it, subject to legal and operational requirements.

EMCR uses reasonable administrative and technical safeguards to protect information. No website or method of transmission can be guaranteed completely secure. Please use a unique password, keep it private, and contact us promptly if you believe an account has been accessed without permission.

8. Your choices and rights

Subject to applicable law and its exceptions, you may ask us to confirm whether we process your personal data, provide access to it, correct inaccurate details, erase it, restrict or object to certain processing, or provide eligible data in a portable format. You may also withdraw consent where processing is based on consent and unsubscribe from updates. We may need to verify your identity before acting on a request, and some records may need to be retained to meet legal obligations or protect legitimate rights.

To make a privacy request or raise a concern, contact EMCR through the Contact Us page. If you are in Nigeria, you may also complain to the Nigeria Data Protection Commission (NDPC).

9. Children and international processing

This website is designed for a general audience and is not intended to invite children to submit personal information without appropriate adult involvement. If you believe a child has provided information inappropriately, contact us so we can review it. EMCR and its service providers may process information in countries other than yours. Where applicable, EMCR will use transfer safeguards required by data-protection law.

10. Changes and contact

We may revise this policy when the website or our practices change. The “Last updated” date above reflects when this page’s content was last saved. For questions, access or correction requests, or complaints, use the Contact Us page on this website.