PRIVACY POLICY

1. Introduction

Goal2Growth Foundation (“we”, “us”, “our”) is committed to protecting the privacy and personal information of all users, including volunteers, donors, beneficiaries, and partners.

This policy explains how we collect, use, store, and protect personal information in compliance with the Protection of Personal Information Act (POPIA).

2. Scope

This policy applies to:

  • Our website

  • Mobile applications

  • Online registration forms

  • All digital and in-person interactions

3. Information We Collect

We may collect the following personal information:

3.1 Personal Details

  • Full name and surname

  • ID number or date of birth

  • Contact details (email, phone number)

  • Gender and demographic information

3.2 Volunteer Information

  • Skills, qualifications, and availability

  • Background checks (where required for safeguarding)

3.3 Donor Information

  • Donation history

  • Payment details (processed securely via third-party providers)

3.4 Beneficiary Information

  • Personal and family details (where necessary)

  • Programme participation data

  • Health or wellbeing information (only where relevant and with consent)

3.5 Digital Data

  • IP address

  • Device and browser information

  • Website/app usage data (cookies and analytics)

4. How We Collect Information

We collect information:

  • Directly from you when you sign up or engage with us

  • Through forms on our website or app

  • Via communication (email, phone, social media)

  • Automatically through cookies and tracking tools

5. Purpose of Processing Personal Information

We process personal information to:

  • Register and manage volunteers, donors, and beneficiaries

  • Deliver programmes and services

  • Communicate updates, events, and opportunities

  • Process donations and issue receipts

  • Ensure safeguarding and compliance requirements

  • Improve our services and digital platforms

6. Legal Basis for Processing

We process personal information in line with POPIA based on:

  • Your consent

  • Performance of a contract or service

  • Legal obligations

  • Legitimate organisational interests

7. Consent

By providing your personal information, you:

  • Consent to its collection and use as outlined in this policy

  • Acknowledge that participation (especially for beneficiaries) may require parental/guardian consent where applicable

You may withdraw consent at any time, subject to legal limitations.

8. Sharing of Information

We will not sell personal information.

We may share information with:

  • Service providers (e.g., payment processors, IT providers)

  • Regulatory or law enforcement authorities (if required by law)

  • Partner organisations (only where necessary and with safeguards in place)

All third parties are required to comply with POPIA.

9. Children’s Privacy

We take extra care when processing children’s information, in line with:

  • Children’s Act 38 of 2005 South Africa

  • POPIA provisions on minors

We will:

  • Obtain parental/guardian consent where required

  • Limit data collection to what is strictly necessary

  • Apply enhanced safeguarding measures

10. Data Security

We implement appropriate safeguards, including:

  • Secure servers and encryption

  • Access controls and authentication

  • Staff confidentiality agreements

However, no system is completely secure, and users share information at their own risk.

11. Data Retention

We retain personal information:

  • Only for as long as necessary

  • In accordance with legal, tax, and operational requirements

Data that is no longer required will be securely deleted or anonymised.

12. Your Rights

Under POPIA, you have the right to:

  • Access your personal information

  • Correct or update your information

  • Request deletion (where applicable)

  • Object to processing

  • Lodge a complaint with the Information Regulator of South Africa

13. Cookies and Tracking

Our website and app may use cookies to:

  • Improve user experience

  • Analyse usage and performance

  • Store user preferences

Users can manage cookie settings via their browser.

14. Cross-Border Data Transfers

If data is stored or processed outside South Africa, we will ensure:

  • Adequate data protection safeguards

  • Compliance with POPIA requirements

15. Updates to This Policy

We may update this Privacy Policy from time to time. Updates will be:

  • Posted on our website/app

  • Effective upon publication

16. Contact Us

For privacy-related queries or requests:

Goal2Growth Foundation
 Email: info@goal2growth.org

17. Acceptance of Policy

By using our website, app, or services, you confirm that you have read and understood this Privacy Policy.