Privacy Policy of The GCFC Foundation NPC

Effective Date: 2nd April 2025

The GCFC Foundation NPC ("we," "our," or "us") is committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, store, and protect your personal data in compliance with the Protection of Personal Information Act (POPIA), General Data Protection Regulation (GDPR), and other relevant data protection laws.

1. Information We Collect

We may collect and process the following personal data:

• Personal Identification Information: Name, surname, email address, phone number, postal address, and ID/passport number.
• Donation and Payment Information: Credit/debit card details, banking information (processed securely via encrypted payment gateways).
• Website Usage Data: IP address, browser type, device information, and cookies.
• Volunteer and Program Participation Data: Interests, skills, experience, and any information provided in volunteer applications.
• Communication Preferences: Information regarding your subscription to newsletters or event notifications.

2. How We Use Your Information

Your personal data is used for the following purposes:

• To provide and manage our services, including volunteer programs and donations.
• To process and acknowledge contributions and issue tax certificates.
• To communicate updates, newsletters, and event invitations (only if consent has been provided).
• To improve website functionality and user experience.
• To comply with legal and regulatory obligations.

3. Data Protection and Security

We take appropriate measures to protect your personal data, including:

• Encryption of Payment Information: All financial transactions are securely processed via SSL encryption and compliant payment gateways.
• Restricted Access: Only authorised personnel can access personal data.
• Data Minimisation: We only collect and retain the necessary data required for our operations.
• Regular Security Audits: Our systems are periodically reviewed to prevent unauthorised access or breaches.

4. Legal Basis for Processing Data

Under GDPR and POPIA, we process personal data on the following legal bases:

• Consent: When you voluntarily subscribe to communications, donate, or apply as a volunteer.
• Contractual Necessity: When processing donations, issuing invoices, or responding to queries.
• Legal Obligation: To comply with financial, tax, or regulatory requirements.
• Legitimate Interests: To improve our services and maintain effective operations.

5. Sharing and Third-Party Disclosure

We do not sell or rent personal information. However, we may share data with:

• Payment Processors: Secure third-party providers who handle encrypted transactions.
• Service Providers: Vendors who assist with email communications, website hosting, or analytics.
• Regulatory Authorities: When required by law or for fraud prevention.

6. Data Retention

We retain your personal data only as long as necessary for operational and legal purposes. Donor records, tax receipts, and financial transactions are retained as per South African tax regulations.

7. Your Rights Under GDPR and POPIA

Depending on your jurisdiction, you may have the right to:

• Request access to your personal data.
• Request correction or deletion of your data.
• Withdraw consent for marketing communications.
• Object to or restrict processing of personal data.
• Lodge a complaint with a data protection authority.

For any data-related requests, contact us at info@thegccfoundation.org.

8. Cookies and Tracking Technologies

Our website uses cookies to enhance user experience and analyse traffic. You can manage cookie preferences through your browser settings.

9. International Data Transfers

If we transfer data outside South Africa or the EU, we ensure adequate protection in compliance with GDPR and POPIA regulations.

10. Updates to This Privacy Policy

We may update this policy periodically. Changes will be posted on our website with an updated "Effective Date."

11. Contact Information

For questions or concerns regarding this Privacy Policy, please contact us at:
The GCFC Foundation NPC
Email: info@thegccfoundation.org
Phone: +27 (0) 60 973 2655