Life Child International Trust (“Life Child”) operates the website, Lifechild.org.za. It is Life Child’s policy to respect your privacy regarding any information Life Child may collect while operating its website as Life Child takes the protection of your data seriously in all of its processing.
Data Protection Officer
Life Child International Trust, 30 Main Road, Three Anchor Bay, 8005, Cape Town, South Africa is the data controller and Karin Muller is the Data Protection Officer. You can contact her by sending an email at firstname.lastname@example.org.
Data collected and purposes of the collection.
Like most website operators, Life Child collects from visitors of Life Child’s websites non-personal data of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site and the date and time of each visitor request. Life Child‘s purposes in collecting such non-personal data are to optimize users’ experience of the Life Child’s websites and render them more user-friendly, better understand how visitors use Life Child’s websites and analyze their behavior for statistical purposes, for example by monitoring the most popular service accounts on the Life Child’s websites. From time to time, Life Child may release non-personal data in the aggregate, e.g., by publishing a report on trends in the usage of its websites. Life Child may display this information publicly or provide it to third parties.
Certain users of Life Child‘s websites choose to interact with Life Child in ways that require Life Child to gather personal data. Life Child does not collect and process more personal data than is necessary to fulfill the purposes for which personal data is collected and processed. The amount, and type, of personal data that Life Child gathers depends on the nature of the interaction, as detailed below.
- Registered users: users who sign up on Life Child’s websites are required to provide a username and email address for identification purposes. Life Child also collects Internet Protocol (IP) addresses for security reasons.
- Transactions with Life Child: those who engage in transactions with Life Child are asked to provide additional information, including the personal and financial information required to process those transactions. In each case, Life Child collects such information only insofar as is necessary or appropriate to fulfill the purpose of the data subject’s interaction with Life Child.
- Support: if you send Life Child a request (for example via a support email or via one of Life Child feedback mechanisms), Life Child reserves the right to publish it in order to help Life Child clarify or respond to your request or to help Life Child support other users.
You have the right to access and update your personal data at any time, send an email to email@example.com to do so.
In addition, and to the extent applicable, you are entitled to submit a request to the Data Protection Officer in order to:
- have access to your personal data and obtain information in relation thereto (i.e. purposes of the processing, categories of personal data concerned, recipients to whom personal data have been or will be disclosed, etc.);
- rectify your personal data;
- erase your personal data, unless retention of personal data is required by any applicable law or competent court or authority;
- restrict or object to the processing of your personal data; and
- receive, or request Life Child to transmit to another designated person or entity, your personal data in a structured, commonly used and machine-readable format.
To exercise any of the abovementioned rights, please contact the Data Protection Officer at firstname.lastname@example.org, who will subsequently confirm you the execution of your request.
If requests are manifestly unfounded or excessive, in particular because of their repetitive character, Life Child reserves its right to either charge a reasonable fee taking into account the request or refuse to act on the request.
Without prejudice of non-personal data, Life Child and/or the Data Protection Officer may request the provision of additional information to confirm the identity of the data subject if they have reasonable doubts concerning the identity of the person making the request.
Duration of storage
General and personal data will be kept by Life Child only as long as it is necessary for the purposes for which they have been provided, unless retention of data is required by any applicable law or competent court or authority or for statistical or archiving purposes.
Location of storage
- User data: your user information (i.e. name, email address, etc.) is stored in Life Child’s online systems. Some other data might also be stored on specific computing systems protected by Passwords and only accessible by authorized personnel or private cabinets accessible only by authorized personnel.
- Credit card credentials: whenever you make a payment through Life Child’s websites, credit card credentials are stored with Life Child’s partners; currently Stripe, Paypal, Payfast, Paygate and Fundraise Up.
Life Child has taken and will maintain appropriate technical and organizsational security measures in particular to protect your personal data against unauthorizsed or unlawful processing, accidental loss, destruction or damage and ensure the ongoing confidentiality, integrity, availability of personal data and resilience of the systems and services used for processing of personal data. Life Child will test and review the efficiency of the implemented technical and organizational measures on a regular basis.
Life Child’s staff
Your personal data will be made available only to the members of Life Child’s staff who need to have access to such personal data to perform the purposes for which personal data have been provided. Such members of Life Child’s staff have been instructed with respect to and have committed to comply with the contractual and legal data protection obligations.
You must ensure that data you provide Life Child with is:
- truthful; and
- compliant with any applicable laws.
In particular, since Life Child will mainly use email communications with you, you are required to notify Life Child or the Data Protection Officer of any modification of your email address.
Insofar as you provide Life Child with personal data about third parties, you represent and warrant that you have the right to share this personal data and where necessary have obtained sufficient informed consent from such persons and provided them with all necessary information, as may be required by applicable law or agreement, for Life Child to store and process any such personal data.
Disclosure of your data
- Transfers to third parties: Life Child may disclose your data to its third-party contractors located in the US, UK, South Africa, Mozambique, Malawi and Zimbabwe that need to have access to such data in order to process it on Life Child‘s behalf or to provide services available at Life Child‘s websites, in particular to other charities/organizsations, payment processors, IT service providers, customer support providers, auditors and lawyers. A complete and detailed list of up-to-date third-party service providers is available upon request at email@example.com. Third-party contractors have executed agreements with Life Child requiring in particular that they abide by the rules of the applicable data protection laws, in particular the EU General Data Protection Regulation 2016/679, the POPI Act, POPIA of South Africa and comply with any instruction they receive from Life Child, as data controller, regarding personal data.
If you are a registered user of a Life Child website and have supplied your email address, Life Child may occasionally send you an email to tell you about new features, solicit your feedback or just keep you up to date on events and its projects. Life Child primarily uses lifechild.org.za to communicate this type of information, so Life Child expects to keep this type of email to a minimum.
You may opt-out from receiving Life Child emails at any time. Please also note that if you do opt-out of receiving messages from Life Child, Life Child may still send you important administrative messages and you cannot opt-out from receiving such administrative messages.
In case of data breach. Life Child will take the following steps:
Step 1: We will first contain the data breach [to prevent any further compromise of personal information].
Step 2: We will assess the data breach by gathering the facts and evaluate the risks, taking action to remediate any risk.
Step 3: We will notify individuals if required. If the breach is an ‘eligible data breach’ under the POPI Act, all the affected individuals will be notified.
Step 4: We will review the incident and consider what actions can be taken to prevent future breaches.
If the changes are significant (e.g. your personal data will be processed for new purposes), Life Child will require your consent during your next visit on Life Child’s website. Life Child will not be able to provide you with all or part of its services as long as you have not accepted the amended terms.
If you need further assistance, please contact the Data Protection Officer at firstname.lastname@example.org or by visiting Life Child’s website and clicking on “Contact” to submit your inquiry.