Privacy notice
How we handle personal information under the Protection of Personal Information Act 4 of 2013 (POPIA).
Last updated: 13 October 2026.
Who we are
Education of Hope Africa NPC (registration 2019/613083/08, NPO 236-182, PBO 930070568) of 11150 Utlhanong Drive, Kagiso Ext. 6, Mogale City, Krugersdorp, 1754, Gauteng, is the responsible party for the personal information described here. You can reach us on +27 73 885 2437 or +27 67 058 4406, or by fax on 086 452 3576.
Information Officer: Under the Protection of Personal Information Act 4 of 2013 the head of the organisation is the Information Officer, so ours is our Executive Director, Portia Matamela Mmbidi, reachable at office@
What we collect, and why
| Who | What we collect | Why |
|---|---|---|
| Donors | Name, email, donation amount and date, and a Paystack transaction reference. Postal address and tax number only where an 18A certificate needs them. We never receive or store card numbers. | To process the donation through Paystack, issue the 18A certificate, meet SARS record-keeping requirements, and report back on how funds were used |
| Newsletter subscribers | Email address | To send the monthly newsletter you asked for |
| Volunteers | Name, contact details, ID number, police clearance certificate, references | To screen and induct you, a legal and safeguarding requirement for anyone working with children |
| Beneficiaries and guardians | Name, age, school, guardian contact, attendance records, and in some programmes health-related information | To run and monitor programmes, make referrals, and report to funders in aggregate |
| Applicants for our courses and youth, enterprise and employability programmes | Full name as on your ID, ID number, mobile number, email address and signature, collected on our POPIA consent form. If you are under 18, your parent or legal guardian’s name and signature as well | To provide the mentorship, training and business support you applied for, and to report on the programme to the sponsor funding it, including for their B-BBEE verification |
| Website visitors | Standard server logs kept by our web host: IP address, browser type and the pages requested. We do not use analytics or advertising trackers | To keep the site working and secure |
Children and special personal information
Information about children, and information about health, is treated as special personal information under POPIA and is subject to stricter rules. We collect it only where necessary to deliver a programme, only with the consent of a competent person (usually a parent or guardian), and we store it separately with restricted access.
We do not publish a child’s image, full name or story without written consent from both the child and their guardian, with the intended use explained in a language they understand. Consent may be withdrawn at any time, including for material already published.
Who we share it with
We do not sell or rent personal information, ever. We share it only with:
- Paystack, our payment processor, when you give by card. Your name, email address and the amount are passed to them so they can take the payment and send you a receipt. Your card number is entered on Paystack’s own secure form. It never reaches this website and we never store it. See the Paystack privacy notice.
- Netlify, which hosts this website and receives the contact, volunteer and newsletter forms you submit on it
- SARS, where required for Section 18A certificates and tax records
- The Department of Social Development, SAPS or a court, where we are legally obliged to report, including under the Children’s Act
- Funders, in aggregate and de-identified form, unless you have separately consented to being named
- For programme applicants who have signed our POPIA consent form, and only for reporting on that programme: the mentors and facilitators who deliver it, the donor or sponsor funding it, that sponsor’s B-BBEE verification agent, and our finance function
How long we keep it
Donation records are kept for at least five years as required by SARS. Volunteer and beneficiary records are kept no longer than needed for the purpose they were collected for, and then de-identified or destroyed. Child protection records are kept longer than ordinary records, because a person may disclose abuse many years afterwards and our record may be the only account made at the time. Newsletter details are deleted as soon as you unsubscribe.
Your rights
Under POPIA you may ask us what we hold about you, ask us to correct or delete it, object to how we use it, and unsubscribe from anything at any time. Write to office@
If you are not satisfied you may complain to the Information Regulator (South Africa) at inforegulator.org.za. We would rather you told us first.
Cookies
This site sets no cookies of its own. The donation widget loads Paystack’s checkout script, which may set cookies strictly necessary to process your payment and guard against fraud; these load on the donation pages only and only when you choose to give.
Security
We take reasonable technical and organisational steps to protect personal information, including restricted access, password protection and secure storage of paper records. If a breach occurs that creates a risk to you, we will notify you and the Information Regulator as POPIA requires.
Changes
We will update this notice when our practices change, and the date at the top will change with it.