GCC Foundation
About Us
Overview Our Story Our Mission How We Work Our Team Statement of Need
Pathways
Overview Youth Mentorship Roots to Resilience Girls on Fire Teacher Training Early Learning Primary School High School Behaviour Under Pressure Legacy Skills Centres
Get Involved
Overview Fund the Work Partner With Us Circle of Change Volunteer
The GCC Journal Contact
Partner With Us Donate
  1. Home
  2. /
  3. Privacy Policy

Privacy Policy

Your data.
Handled with care.

We are committed to protecting your privacy and handling your personal information responsibly, in compliance with both POPIA and GDPR.

Effective Date: 2 April 2025

The GCFC Foundation NPC, known as The GCC Foundation ("we," "our," or "us"), takes your privacy seriously. This policy explains how we collect, use, store and protect your personal data in compliance with the Protection of Personal Information Act (POPIA) and the General Data Protection Regulation (GDPR).

We serve communities across South Africa and work with partners, donors and supporters internationally. This policy applies to all personal data we process, wherever you are based.

Section 01

Information We Collect

We may collect and process the following categories of personal data:

  • Personal IdentificationName, surname, email address, phone number, postal address and ID or passport number.
  • Donation and Payment InformationCredit and debit card details and banking information, processed securely via encrypted payment gateways.
  • Website Usage DataIP address, browser type, device information and cookies.
  • Volunteer and Programme Participation DataInterests, skills, experience and any information provided in volunteer or programme applications.
  • Communication PreferencesInformation regarding your subscription to newsletters or event notifications.
Section 02

How We Use Your Information

Your personal data is used for the following purposes:

  • To provide and manage our services, including volunteer programmes and donations.
  • To process and acknowledge contributions and issue Section 18A tax certificates.
  • To communicate updates, newsletters and event invitations, only where consent has been provided.
  • To improve website functionality and user experience.
  • To comply with legal and regulatory obligations.
Section 03

Data Protection and Security

We take appropriate technical and organisational measures to protect your personal data, including:

  • Encryption of Payment InformationAll financial transactions are securely processed via SSL encryption and compliant payment gateways.
  • Restricted AccessOnly authorised personnel can access personal data.
  • Data MinimisationWe only collect and retain the data necessary for our operations.
  • Regular Security AuditsOur systems are periodically reviewed to prevent unauthorised access or breaches.
Section 04

Legal Basis for Processing Data

Under GDPR and POPIA, we process personal data on the following legal bases:

Basis When it applies
Consent When you voluntarily subscribe to communications, donate or apply as a volunteer.
Contractual Necessity When processing donations, issuing invoices or responding to queries.
Legal Obligation To comply with financial, tax or regulatory requirements.
Legitimate Interests To improve our services and maintain effective operations.
Section 05

Sharing and Third-Party Disclosure

We do not sell or rent personal information. We may share data only with:

  • Payment ProcessorsSecure third-party providers who handle encrypted transactions.
  • Service ProvidersVendors who assist with email communications, website hosting or analytics.
  • Regulatory AuthoritiesWhen required by law or for fraud prevention purposes.
Section 06

Data Retention

We retain your personal data only for as long as necessary for operational and legal purposes. Donor records, tax receipts and financial transactions are retained in accordance with South African tax regulations.

Section 07

Your Rights Under GDPR and POPIA

Depending on your jurisdiction, you may have the right to:

  • Request access to your personal data.
  • Request correction or deletion of your data.
  • Withdraw consent for marketing communications.
  • Object to or restrict the processing of your personal data.
  • Lodge a complaint with a data protection authority.

To exercise any of these rights, please contact us at info@thegccfoundation.org.

Section 08

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience, analyse traffic and support our marketing efforts. We use a consent management platform (CookieYes) to manage your preferences. Non-essential cookies will only be set after you have given explicit consent.

We use cookies in the following categories:

  • Strictly NecessaryEssential for the website to function. These cannot be disabled.
  • AnalyticsGoogle Analytics (GA4) helps us understand how visitors use our site. These cookies are only set with your consent.
  • MarketingMeta Pixel enables us to measure the effectiveness of our outreach. These cookies are only set with your consent.

You can update your cookie preferences at any time using the cookie settings link in the footer of our website.

Section 09

International Data Transfers

Where we transfer personal data outside South Africa or the European Union, we ensure adequate protection is in place in compliance with GDPR and POPIA regulations, including the use of standard contractual clauses or equivalent safeguards where required.

Section 10

Updates to This Policy

We may update this policy periodically to reflect changes in our practices or legal obligations. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy from time to time.

Section 11

Contact Us

For questions, concerns or data-related requests, please contact us:

The GCFC Foundation NPC
known as The GCC Foundation

Email: info@thegccfoundation.org

Phone: +27 (0) 60 973 2655

Questions?

We're always happy to help.

If you have any questions about how we handle your data, or would like to exercise your rights, get in touch with us directly.

Contact Us →