Privacy Policy - Foundation for a Sustainable Future

FOUNDATION FOR A SUSTAINABLE FUTURE NPC

Privacy Policy

[Disclaimers]

By making use of this Website, you acknowledge that you have read, understand, and agree to be bound by the terms set out in this Privacy Policy, as amended from time to time. Your continued use of our website also indicates that you acknowledge and agree that this Privacy Policy may be amended from time to time, without notice to you and agree to be bound by the amended terms.

OVERVIEW
1. The Foundation for a Sustainable Future (“the Foundation”) recognises the obligations imposed by the Protection of Personal Information Act 4 of 2013 (“POPIA”) and therefore, this Privacy Policy must be interpreted in accordance with the definitions set out in POPIA.
2. Given the nature of our business, we are necessarily involved in the collection and processing of personal information. Ensuring data privacy and the protection of your personal information is important to us. In the event that we collect, use or disclose your personal information, we are committed to ensuring that such collection, use and disclosure is lawful, reasonable and pursuant to the purpose of our business and philanthropic engagements with you, as prescribed by POPIA.
3. This Privacy Policy sets out what personal information we collect from you when you engage with us or browse our website, how we collect your personal information, the purpose for collecting such personal information, and how we use your personal information.
WHAT IS PERSONAL INFORMATION AND WHY DO WE COLLECT YOUR PERSONAL INFORMATION
1. Personal information refers to information relating to an identifiable person (including individuals and organisations). This includes information about your name, contact details, including your phone number and email, address, business information and relevant financial and tax-related information.
2. We will use our best endeavours to limit the processing of your personal information to that which you have provided your express consent. Notwithstanding this, your continued use and enjoyment of our website, services, engagements with us, and your agreement to this Privacy Policy is construed as consent in terms of section 69 of POPIA.
3. The Foundation processes personal information in order to provide, maintain and improve the performance of our objectives as a non-profit company insofar as those objectives relate to you. This includes collecting information to:
  1. Establish and verify the identity and business operations of a data subject, including those processes which may be required from the Foundation by law or good industry practice;
  2. Perform the services that are requested of us, where relevant;
  3. Perform our objectives as a non-profit company insofar as those objectives relate to you;
  4. Accomplish any further purpose that is related to providing our services or performing our objectives;
  5. Communicate in the manner which is preferred, including via email, post, SMS or telephonically;
  6. Maintain and update our database of clients, visitors, benefactors, beneficiaries and other relevant stakeholders;
  7. Provide updates and information about our services and objectives;
  8. Recruitment and related activities;
  9. To conduct research or for statistical analysis;
  10. For auditing or record keeping purposes;
  11. Fulfil any contractual or legal obligation that we may have;
  12. Comply with any law or regulation or legal request from a recognised Authority; and
  13. Any other activity which may be lawful, reasonable and necessary to our objectives.
HOW WE COLLECT YOUR PERSONAL INFORMATION
1. We collect your information in the four ways.
2. First, we collect your personal information directly from you or your representatives. We may collect information through electronic communication, telephonically, during meetings, through related documentation and in general interactions with you or your representatives, including electronic interactions.
3. Secondly, we collect your personal information from your electronic profiles, including your website and social media platforms. Information received from your online profiles are generally used for general informational purposes.
4. Thirdly, we collect your personal information from our affiliates and third-party service providers. This information is used for verification purposes, general informational purposes and to supplement information which you have already provided or expressly and directly agreed to provide.
5. Lastly, we may collect your personal information through IT and electronic networks to determine who is visiting and using our Website and other online platforms. This includes personal information like your IP address, the name of your Internet Service Provider, your browser, the pages of our Website, the date and time that you visit our Website and other information relating to your computer operating system, among other things.
HOW LONG WILL WE KEEP YOUR INFORMATION
1. We may retain your personal information for as long as we continue to provide services to you or engage with you in respect of our objectives and your involvement therein, you provide services to us, or you continue to visit our Website, and for five years thereafter.
2. We may further retain your personal information for a longer period of time if:
  1. We are required by law or regulation to do so;
  2. We are required by a contractual obligation with you to do so or you expressly request us to retain such information for a longer period; or
  3. We are required to keep your personal information for a legitimate purpose related to our objectives and services.
DISCLOSING YOUR PERSONAL INFORMATION
1. We will not disclose your personal information unless it is for purposes as set out in this Privacy Policy or if we have received your permission to do so. We will disclose your personal information:
  1. To our employees, contractors and agents to the extent that these parties need your personal information in order for us to provide services to you or fulfil our objectives insofar as they relate to you;
  2. To our affiliates;
  3. To authorities or governmental agencies in order to comply with any law, regulation or legal process; or
  4. In order to protect our rights, property or safety or those of our employees, contractors, agents, clients or any other third party.
INFORMATION SECURITY
1. We take care to ensure that your personal information is adequately protected against unauthorised access and use and remains secure.
2. We may store your personal information at a physical location or by electronic means, including on a cloud-based system. We store your personal information directly or transfer and store it on a central database.
3. We will take reasonable, appropriate and generally accepted measures to ensure that your personal information is protected against unauthorised and unlawful processing, accidental loss, destruction or damage. However, we cannot guarantee that the collection, transmission and storage of your personal information is absolutely secure online. We accordingly do not warrant the absolute security of any personal information we process.
4. In order to protect your personal information, we undertake to review our security controls regularly and implement appropriate and generally accepted technical and organisational measures to ensure such protection as far as reasonably possible.
5. We further impose necessary security, privacy and confidentiality obligations on those third parties that we have a contractual relationship with to ensure, as far as reasonably possible, that your personal information remains secure. We will also take the necessary measures to ensure that such third parties agree to treat your personal information with the same standard of care as we are obliged to do.
6. If your personal information is processed in a country that does not have substantially similar laws for the protection of personal information, we will take the necessary measures to ensure that your personal information is adequately protected in terms of the minimum standards set down by POPIA.
YOUR RIGHTS
You have the following rights as they relate to the collection and processing of your personal information:
1. Access to information: you have the right to request a copy of the personal information that we hold about you. A request for such information may be subject to an administrative fee permitted by law. We may also require a copy of your identity or registration documentation for verification purposes.
2. Right to the correction of information: you have the right to request that we update or correct the personal information that we hold about you. We may also require a copy of your identity or registration documentation for verification purposes.
3. Right to the deletion of information: under certain circumstances, you have the right to request that we delete the personal information that we hold about you. We may also require a copy of your identity or registration documentation for verification purposes.
4. Right to object: you have the right to object to us processing the personal information that we hold about you if you have not consented to the processing, the processing is not necessary to perform our services, or if the consent is not related to a legal purpose or for the discharge of a legal obligation.
5. Right to lodge a complaint: you have the right to complain if you are concerned about the way in which we collect or process the personal information that we hold about you.
6. If you believe that we have used your personal information in a manner which is contrary to this Privacy Policy, we request that you first attempt to resolve any concerns with us directly, by contacting our information officer at:
  Information officer: Eben Karsten
  Direct email address: eben@foundationforasustainablefuture.org
7. If you are not satisfied with the process, you have the right to lodge a complaint with the Information Regulator at:The Information Regulator (South Africa)
  JD House
  27 Stiemens Street
  Braamfontein
  Johannesburg
  complaints.IR@justice.gov.za
COOKIES
1. When viewing or visiting our Website, information may be retrieved or collected from your browser and stored, mostly in the form of cookies. A cookie is a file containing an identifier that is sent by a web server to a web browser and is stored by that browser.
2. The personal information that we store about you may be linked to the information stored in and obtained from cookies. It does not usually directly identify you, but it can give you a more personalised web experience.
3. Insofar as such cookies are not strictly necessary for providing our online experience, we will ask you to consent to our use of cookies when you first visit our Website and other online platforms.
4. We use both “persistent” cookies and “session” cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless you delete it before the expiry date; a session cookie, on the other hand, will expire at the end of your session, when the web browser is closed.
5. You are entitled to review and manage your Cookie Preferences at any time.
CHANGES TO THIS POLICY
1. We may update this privacy policy at any time by publishing an updated version on our Website. The updated policy will be published on our Website. We encourage you to review this Policy on a regular basis.