Donate now

Privacy Policy

Effective Date: 8 November

KHULA Education (“KHULA”, “we”, “us”, “our”) is committed to protecting your privacy and ensuring that your personal information is handled responsibly and lawfully.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit https://khula-education.org/ (the “Site”), subscribe to our newsletter, make a donation, or otherwise engage with us.

This policy complies with:

  • The Protection of Personal Information Act 4 of 2013 (POPIA) – South Africa

  • The UK General Data Protection Regulation (UK GDPR)

  • The EU General Data Protection Regulation (EU GDPR) (where applicable)

1. Who We Are

KHULA Education is a nonprofit organisation operating in South Africa and the United Kingdom, supporting access to quality education from early childhood through employment.

Data Controller:
KHULA Education

Contact Details:
Email: [Insert privacy email address]
Telephone: +27 71 624 2257
UK Contact (if applicable): [Insert UK contact email]
Address: [Insert registered address]

2. What Personal Data We Collect

2.1 Information You Provide Directly

We may collect:

  • Full name

  • Email address

  • Phone number

  • Billing address

  • Donation amount and transaction details

  • Organisation name (if applicable)

  • Messages or enquiries submitted via forms

  • Newsletter subscription details

  • Gift Aid information (if donating from the UK)

We only collect personal data that is necessary for the purpose for which it is provided.

2.2 Donation Information

When you make a donation:

  • Payments are processed securely through third-party payment processors.

  • We do not store full credit card or debit card details on our servers.

  • We retain transaction records for financial compliance and auditing purposes.

2.3 Automatically Collected Information (Analytics & Cookies)

We may collect:

  • IP address

  • Browser type

  • Device information

  • Pages visited

  • Time spent on pages

  • Referral sources

  • Cookie identifiers

We use analytics tools (e.g., Google Analytics or similar services) to understand website usage and improve performance.

3. Legal Basis for Processing (GDPR Compliance)

Under GDPR and POPIA, we process personal data on the following lawful bases:

  • Consent – for newsletter subscriptions and marketing communications

  • Contractual necessity – to process donations

  • Legal obligation – financial and regulatory compliance

  • Legitimate interests – improving website performance and preventing fraud

Where consent is required, you may withdraw it at any time.

4. Newsletter & Marketing Communications

If you subscribe to our newsletter:

  • You must provide explicit consent (via opt-in checkbox).

  • You may unsubscribe at any time using the link in our emails.

  • We will not send marketing communications without your consent (where legally required).

We use secure third-party email marketing platforms to manage communications.

5. Cookies Policy

Our website uses cookies to:

  • Ensure proper website functionality

  • Analyse traffic and performance

  • Improve user experience

  • Track marketing effectiveness (if applicable)

You will be presented with a cookie banner allowing you to:

  • Accept all cookies

  • Reject non-essential cookies

  • Manage cookie preferences

You may also adjust browser settings to disable cookies.

6. Sharing of Personal Data

We do not sell personal data.

We may share personal data with:

  • Payment processors

  • Email marketing platforms

  • Website hosting providers

  • IT and analytics providers

  • Legal, regulatory, or auditing authorities (if required)

All third parties are required to implement appropriate security safeguards.

7. International Transfers

Because we operate in South Africa and the UK, your data may be transferred between these jurisdictions or to secure service providers in other countries.

Where data is transferred internationally, we ensure:

  • Adequate safeguards are in place

  • Standard contractual clauses are used where required

  • Compliance with GDPR and POPIA standards

8. Data Retention

We retain personal data only for as long as necessary to:

  • Fulfil the purpose for which it was collected

  • Comply with tax, charity, and financial regulations

  • Resolve disputes

  • Enforce agreements

Donor financial records may be retained as required by law.

9. Your Rights (GDPR & POPIA)

You have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict processing

  • Object to processing

  • Withdraw consent

  • Request data portability (where applicable)

  • Lodge a complaint with a supervisory authority

Supervisory Authorities

South Africa:
Information Regulator (South Africa)

United Kingdom:
Information Commissioner’s Office (ICO)

10. Data Security

We implement appropriate technical and organisational security measures to protect personal data from:

  • Unauthorised access

  • Loss or destruction

  • Misuse

  • Alteration

However, no internet transmission is 100% secure.

11. Children’s Data

KHULA Education supports children’s education; however:

  • We do not knowingly collect personal data directly from children without parental or guardian consent.

  • Any safeguarding-related data is handled with strict confidentiality and legal compliance.

12. Third-Party Links

Our Site may contain links to external websites. We are not responsible for their privacy practices.

13. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised Effective Date.

Continued use of the Site after updates constitutes acceptance of the revised policy.