This policy explains what we collect through this website, why we collect it, who it is shared with and what you can ask us to do about it.
Draft — last updated: to be completed on publication. The Foundation's registered name, registration numbers, physical address and Information Officer must be filled in below before this page goes live.
1. Who we are
The Panyaza Lesufi Education Foundation NPC is the responsible party for personal information collected through this website. Our contact details are on the contact page. Enquiries about this policy, and any request described in section 8, should be addressed to our Information Officer at the same address.
2. What we collect
We collect only what you give us, plus the minimum our host records automatically:
- Contact details you enter into a form — name, email address, telephone number and organisation.
- Enquiry and booking details — the package you are interested in, player names you supply for the Golf Day, and anything you write in a message field.
- Programme application information, where you apply to a programme — school, results, household circumstances and supporting documents.
- Basic technical data kept in our web host's server logs — IP address, browser type and the pages requested.
We do not use analytics or advertising trackers, and this site sets no tracking cookies.
3. Why we collect it
To reply to enquiries, administer Golf Day bookings and invoices, assess programme applications, administer programme support, report to funders in aggregate form, send the newsletter if you asked for it, and meet our record-keeping obligations as a non-profit company.
4. Our legal basis
We process personal information with your consent, or where processing is necessary to carry out an agreement with you, to protect a legitimate interest, or to comply with a legal obligation. You may withdraw consent at any time, which we will act on unless the law requires us to keep the record.
5. Who we share it with
We do not sell personal information and we do not share it for marketing. It is shared only with:
- Service providers acting on our instruction — our web and email host, our form provider, our auditors, and the event coordinator who administers Golf Day bookings on our behalf.
- Funders and partners, in anonymised and aggregated form only.
- Authorities, where we are legally obliged to disclose it.
Our form provider processes and stores form submissions outside South Africa. By sending a form you consent to that transfer, which is permitted under section 72 of POPIA where the recipient is bound by comparable protections.
6. Third-party content on this site
This site loads nothing from third parties until you ask it to. The one exception is the featured video on the home page: it shows a still image held on our own server, and only when you press play does the page load a YouTube player. At that point YouTube receives your IP address and may set its own cookies, governed by Google's privacy policy rather than this one. If you never press play, nothing is requested from YouTube.
7. How long we keep it
Enquiries are kept for two years. Programme application records are kept for five years after the close of the relevant cycle. Financial and event records are kept for the period required by the Companies Act and tax legislation. Newsletter subscriptions are kept until you unsubscribe.
8. Children's information
Many of our programmes serve learners under 18. Where an applicant is a child, we require the written consent of a parent or legal guardian before processing their information, and we collect only what is needed to assess and administer the application.
9. Photographs and video at our events
We photograph and film our events, and those images may be published on this site, in reports and on social media. If you appear in an image and would like it removed, write to us and we will take it down from material we control. Where a child is identifiable, we obtain guardian consent before publishing.
10. Your rights
You may ask us to confirm what we hold about you, to correct or delete it where we are not required to keep it, to stop using it for a particular purpose, or to withdraw your consent. You may also object to processing. Send requests to the Information Officer at the address on the contact page; we will respond within a reasonable period and may need to verify your identity first.
11. Security
We apply reasonable technical and organisational measures to protect personal information, including encrypted connections to this site and access controls on our records. No system is perfectly secure, and if a breach affects your information we will notify you and the Information Regulator as POPIA requires.
12. Cookies
This site sets no cookies of its own and uses no analytics. Pressing play on the featured video allows YouTube to set cookies, as described in section 6. If we add analytics later, this section will be updated and a cookie notice added.
13. Changes to this policy
We may update this policy from time to time. The current version and the date it took effect will always appear at the top of this page.
14. Complaints
If you are not satisfied with how we have handled your information, please raise it with us first. You may also complain to the Information Regulator of South Africa, at inforegulator.org.za.