GCNM HomeGhana Coalition of NGOs in Malaria

Privacy Policy

Version: 2026-11-05. Data controller: Ghana Coalition of NGOs in Malaria (GCNM), Ghana. This notice applies to the public website, NGO network, membership application, login portal and coalition administration tools.

1. Information we collect

Depending on your interaction with GCNM, we collect name, contact details, NGO affiliation, role, membership applications, payments and receipts, programme submissions, correspondence, and information needed to secure user accounts. At registration, adults provide age in completed years and a gender response, including a “prefer not to say” option. We use these demographics for aggregated membership reporting and not for public individual profiles.

2. Why we use your information

We process necessary information to administer coalition participation and membership, deliver requested services, maintain accurate financial and compliance records, safeguard accounts, and fulfil lawful obligations. Direct marketing and optional website analytics are separate purposes that require a clear opt-in. We do not condition basic coalition services on agreeing to optional tracking.

3. Cookies and consent-controlled tracking

Essential cookies support login, CSRF protection, secure sessions and your privacy choices. Optional analytics, only with your consent, may record page categories, navigation clicks, file downloads, form starts/submissions and use of search. We do not record passwords, form answers, search text, payment details, or complete personally identifying URLs in the optional analytics events. Marketing consent is separate; the release does not automatically activate any advertising trackers. You can change or withdraw your choice at any time using “Privacy settings” on the website.

4. Who can access data

Authorised GCNM staff and suitably assigned NGO users receive access only as needed for their responsibilities. Service providers processing data for GCNM should be subject to appropriate contractual, confidentiality and security requirements. NGO membership records and individual contact data must not be treated as public simply because an NGO appears in the coalition directory.

5. Sharing and transfers

Data may be shared with payment processors, service providers and authorities where necessary for valid membership services or legal requirements. GCNM should assess any cross-border processing and document adequate safeguards before it occurs. We do not sell individual member data to advertisers.

6. Data retention and security

Personal information is retained only while required for its legitimate purpose or an applicable legal, contractual, financial or dispute-related obligation. Optional first-party analytics events in this release are intended for a 180-day retention period, subject to operation of the scheduled cleanup task. Access controls, encryption in transit, limited privileges and reviewable audit records are part of the security programme. No system is completely risk-free.

7. Your rights and choices

Under Ghana’s Data Protection Act, 2012 (Act 843), individuals can request information about processing, access and correction of personal information, object to certain processing, withdraw optional consent and raise concerns about unlawful processing. You may also request to end your coalition participation and ask for applicable personal data to be erased. Requests are reviewed because some records must be retained where the law or valid obligations require it. Cancelling membership is not identical to immediate deletion of all financial or compliance records.

8. How to submit a request

Sign in to use the Privacy and Data Requests portal, or contact the GCNM National Secretariat through the public contact page. The coalition will verify your identity before disclosing, correcting or removing personal records.

9. Children

Self-service account registration in this release is limited to adults aged 18 and above. GCNM should establish a separate documented guardian-consent and safeguarding procedure before enabling accounts for minors.

10. Changes, questions and complaints

We will publish material updates to this notice with a new version and request renewed optional-tracking consent where appropriate. You may complain to the Ghana Data Protection Commission if your data rights are not respected.

Governance note: The GCNM Secretariat must review and approve the stated processing practices, provider agreements, statutory registration details, retention schedule, contact information and operational controls before publishing this notice as an approved policy.