Privacy Policy

Last updated: October 28, 2026

Thrive and Shine LBG ("Thrive & Shine", "we", "us", or "our") is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and share personal information when you visit our website, donate, apply for programmes, subscribe to our newsletter, or otherwise interact with us.

This policy is designed to comply with the Ghana Data Protection Act, 2012 (Act 843) and, where applicable, the General Data Protection Regulation (GDPR) of the European Union.

1. Data Controller

The data controller responsible for your personal data is:

• Organisation: Thrive and Shine LBG
• Address: Ayorkor Clottey Street, Accra, Ghana
• Email: support@thrivenshine.org
• Registration No: C0064195732

For data protection enquiries, contact us at support@thrivenshine.org.

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identity and contact data: name, email address, phone number, postal address;
• Application and programme data: information submitted in scholarship, volunteer, event, or partnership applications (e.g. academic background, employment details, statements of need);
• Donation data: donation amount, payment reference, and billing contact details processed through our payment providers;
• Communication data: messages you send via contact forms, email, or social media;
• Newsletter data: email address and subscription preferences;
• Technical data: IP address, browser type, device information, pages visited, and cookies (see Section 9).

We do not intentionally collect sensitive personal data unless required for a specific programme and with your explicit consent, or as permitted by law.

3. How We Collect Data

We collect personal data when you:

• Fill in forms on our website (contact, newsletter, applications);
• Make a donation through our payment channels;
• Communicate with us by email, phone, or social media;
• Attend our events or programmes;
• Visit our website (through cookies and analytics tools, where enabled).

4. Legal Bases for Processing

Under the Ghana Data Protection Act and GDPR (where applicable), we process personal data on the following bases:

• Consent: e.g. newsletter subscriptions, optional marketing communications, and non-essential cookies;
• Contract: processing necessary to respond to your requests, manage applications, or fulfil donations;
• Legitimate interests: operating and improving our website, safeguarding our organisation, and communicating about our mission—balanced against your rights;
• Legal obligation: compliance with Ghanaian law, tax, accounting, or regulatory requirements;
• Vital or public interest: where processing supports our charitable objectives and is permitted by applicable law.

5. How We Use Your Data

We use personal data to:

• Process donations and issue acknowledgements or receipts;
• Review and administer scholarship, volunteer, and programme applications;
• Respond to enquiries and provide support;
• Send newsletters and updates you have subscribed to;
• Manage partnerships and corporate relationships;
• Improve our website, services, and user experience;
• Comply with legal and regulatory obligations;
• Protect against fraud, misuse, or security incidents.

6. Sharing Your Data

We do not sell your personal data. We may share data with:

• Service providers: payment processors, email platforms, form providers, hosting services, and analytics tools that process data on our behalf under contractual safeguards;
• Partners and funders: where relevant to co-funded programmes, and only with appropriate notice or consent;
• Regulators and authorities: when required by law or to protect our legal rights;
• Professional advisers: lawyers, auditors, or consultants bound by confidentiality obligations.

We require third parties to handle personal data securely and only for specified purposes.

7. International Transfers

Some of our service providers may process data outside Ghana or the European Economic Area (EEA). Where we transfer personal data internationally, we implement appropriate safeguards as required by the Ghana Data Protection Act and GDPR, such as standard contractual clauses or ensuring the recipient provides adequate protection.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Retention periods vary by data type—for example, donation records may be kept longer for audit purposes, while marketing data is retained until you unsubscribe.

9. Cookies and Similar Technologies

We use cookies in two groups:

• Strictly necessary. A session cookie keeps the site secure, including forms and donations. These cookies stay on because the site needs them to work.
• Analytics. We use Google Analytics to see which pages are useful. These cookies stay on unless you reject them. Essential cookies stay on either way.

You can reject analytics, or accept them, from the notice on your first visit. We store that choice on your device for 12 months. You can change it at any time from Cookie settings.

You can also block cookies in your browser. Blocking strictly necessary cookies may stop forms and donations from working. Google Analytics may process technical data outside Ghana (see Section 7).

The contact form uses Google reCAPTCHA v3 to block spam. Google may receive technical data, including your IP address, and set a cookie for that check. Google's Privacy Policy and Terms of Service apply.

10. Your Rights

Under the Ghana Data Protection Act, 2012 (Act 843), you have the right to:

• Be informed about the collection and use of your personal data;
• Access personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Object to processing in certain circumstances;
• Request deletion of your data where applicable;
• Lodge a complaint with the Data Protection Commission of Ghana.

If you are in the European Economic Area or UK, GDPR also grants you rights including data portability, restriction of processing, and withdrawal of consent (where processing is consent-based), without affecting the lawfulness of processing before withdrawal.

To exercise your rights, contact us at support@thrivenshine.org. We will respond within the timeframes required by applicable law.

11. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our website is not directed at children under 16. We do not knowingly collect personal data from children without appropriate parental or guardian consent. If you believe we have collected data from a child in error, please contact us so we can take appropriate action.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will indicate when changes were made. We encourage you to review this page periodically.

14. Supervisory Authority

If you are dissatisfied with how we handle your personal data, you may contact the Data Protection Commission of Ghana. If you are in the EU/EEA, you may also lodge a complaint with your local data protection authority.

15. Contact Us

For questions about this Privacy Policy or our data practices, contact us at:

• Email: support@thrivenshine.org
• Address: Ayorkor Clottey Street, Accra, Ghana

You may also reach us through our contact page.