Privacy Policy
ADRF Foundation
1. Introduction
Africa Diaspora Revival Fund NPC, trading as ADRF Foundation (“ADRF Foundation”, “ADRF”, “we”, “us” or “our”), respects your privacy and is committed to protecting personal information entrusted to us.
This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you:
- visit or use the ADRF Foundation website;
- make a donation or contribution;
- purchase goods or services through our website;
- submit an enquiry or contact us;
- participate in an ADRF Foundation programme, campaign or initiative;
- subscribe to communications from us; or
- otherwise interact with ADRF Foundation electronically.
We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”), the Electronic Communications and Transactions Act and other applicable South African laws.
For purposes of POPIA, ADRF Foundation is the responsible party in respect of personal information for which it determines the purpose and means of processing.
2. Our Details
|
Responsible Party |
Africa Diaspora Revival Fund NPC |
|
Trading as |
ADRF Foundation |
|
Physical Address |
21 Tweedracht, Boschkop,
PRETORIA, 0002, Gauteng, South Africa.
|
|
|
info@adrffoundation.org |
|
Website |
|
|
Company Registration Number |
2026/081542/08 |
|
Information Officer |
Nonhlanhla Mavuso
|
Privacy-related enquiries may be submitted to info@adrffoundation.org, unless a separate Information Officer email address is published by ADRF Foundation.
3. Personal Information We May Collect
Depending on how you interact with us, we may collect the following categories of personal information.
3.1 Identity and Contact Information
- name and surname;
- telephone or mobile number;
- email address;
- physical, postal, delivery or billing address;
- country of residence; and
- organisation or company details where applicable.
3.2 Donation, Order and Transaction Information
- donation or order amount;
- products or services purchased;
- billing and delivery information;
- transaction reference numbers;
- payment status;
- payment method;
- refund or cancellation information; and
- information necessary for transaction reconciliation, audit and customer support.
3.3 Payment Information
Online card and other electronic payments may be processed by First National Bank (FNB), other acquiring banks, card schemes and/or approved payment service providers engaged by ADRF Foundation.
Where payment information is entered on a secure payment gateway operated by a bank or payment service provider, ADRF Foundation does not receive or store the customer’s full card number, PIN or card verification value (CVV/CVC).
ADRF Foundation will not intentionally store a cardholder’s CVV/CVC following completion of a transaction.
Payment service providers may independently collect and process payment information in accordance with their own privacy and security policies and applicable payment-card security requirements.
4. Website and Technical Information
When you use our website, certain technical information may be collected automatically, including:
- Internet Protocol (IP) address;
- browser type;
- device type;
- operating system;
- pages viewed;
- date and time of access;
- referring website;
- website usage information; and
- cookie or similar technology identifiers.
We use this information for website security, fraud prevention, troubleshooting, analytics and improvement of the website and user experience.
5. How We Use Personal Information
We may process personal information for purposes including:
- processing donations and contributions;
- processing purchases and payments;
- providing order and payment confirmations;
- arranging delivery of products;
- managing refunds, returns and cancellations;
- responding to enquiries and customer support requests;
- maintaining donor, customer and transaction records;
- preventing and detecting fraud, misuse and security incidents;
- verifying transactions;
- complying with financial, tax, accounting, audit, legal and regulatory requirements;
- administering ADRF Foundation projects and programmes;
- evaluating and improving our programmes, website and services;
- maintaining the security and integrity of our systems;
- communicating important service or transaction information;
- sending newsletters, fundraising communications or promotional information where legally permitted; and
- establishing, exercising or defending legal rights.
We will not process personal information in a manner that is incompatible with the purpose for which it was originally collected unless permitted by law.
6. Whether Providing Information Is Mandatory
Certain personal information is required in order for ADRF Foundation to process a transaction, donation, purchase, delivery, refund or request.
Where required information is not supplied, we may be unable to:
- process a donation;
- complete a purchase or payment;
- deliver products;
- process a refund;
- respond adequately to an enquiry; or
- provide the requested service.
Other information, including marketing preferences, is generally voluntary.
7. Lawful Processing
ADRF Foundation processes personal information only where permitted by applicable law. Depending on the circumstances, processing may be necessary:
- to perform or conclude an agreement with you;
- to comply with a legal obligation;
- to protect a legitimate interest of ADRF Foundation or another person;
- for the proper performance of ADRF Foundation’s activities; or
- where you have provided consent.
Where processing is based on consent, you may withdraw that consent, subject to applicable law and any lawful retention obligations.
8. Sharing Personal Information
We do not sell personal information.
We may disclose personal information where reasonably necessary to:
- FNB and other acquiring banks;
- payment gateways and payment service providers;
- Visa, Mastercard and other applicable card or payment networks;
- financial institutions involved in processing a transaction;
- courier, logistics and delivery providers;
- website hosting and technology service providers;
- cloud, communication and IT service providers;
- accountants, auditors, attorneys and professional advisers;
- fraud prevention and cybersecurity service providers;
- government authorities, regulators or law-enforcement agencies where required by law; and
- other service providers assisting ADRF Foundation with its legitimate activities.
Service providers processing personal information on our behalf are expected to protect the information appropriately and use it only for authorised purposes.
9. International and Cross-Border Processing
ADRF Foundation’s work has an African and international reach and some of our technology or service providers may operate outside South Africa.
Personal information may therefore be transferred to, stored in or processed in another country where necessary for the purposes described in this Privacy Policy.
Where personal information is transferred outside South Africa, ADRF Foundation will take reasonable steps to ensure that the transfer complies with POPIA, including the requirements applicable to cross-border transfers of personal information.
10. Security of Personal Information
ADRF Foundation takes reasonable and appropriate technical and organisational measures designed to protect personal information against:
- loss;
- damage;
- unauthorised destruction;
- unlawful access;
- unauthorised disclosure; and
- unlawful processing.
Measures may include, as appropriate:
- secure website connections and encryption;
- access controls;
- authentication controls;
- restricted administrative access;
- secure payment gateways;
- system monitoring;
- data backup and recovery controls;
- security updates; and
- appropriate oversight of service providers.
Online payments are processed through payment environments designed to use appropriate transaction-security measures. Where applicable, card transactions may be subject to 3-D Secure authentication and other controls required by the acquiring bank and card schemes.
No internet-based system can be guaranteed to be completely secure, and ADRF Foundation cannot guarantee absolute security. We nevertheless take reasonable steps to protect the information entrusted to us.
11. Security Incidents
If ADRF Foundation becomes aware of a security compromise affecting personal information, we will investigate the incident and take appropriate remedial measures.
Where required by POPIA, ADRF Foundation will notify the Information Regulator and affected data subjects in accordance with applicable legal requirements.
12. Retention of Personal Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or where retention is required or authorised by law.
Transaction, accounting, tax, donation and financial records may be retained for periods required under applicable financial, tax, audit or other legislation.
When personal information is no longer required and ADRF Foundation is not legally entitled or required to retain it, it will be deleted, destroyed or de-identified in an appropriate manner.
13. Cookies
Our website may use cookies and similar technologies to:
- enable essential website functions;
- maintain website security;
- remember user preferences;
- understand website usage;
- improve website performance; and
- measure the effectiveness of website content.
Where legally required, non-essential cookies will be used subject to the user’s choices or consent.
Browser settings can generally be used to block or remove cookies. Blocking essential cookies may affect the functionality of certain parts of the website.
14. Marketing Communications
Where legally permitted, ADRF Foundation may send information about Foundation activities, programmes, fundraising initiatives, events or related opportunities.
You may opt out of electronic marketing communications at any time by:
- using the unsubscribe facility provided in the communication; or
- contacting us at info@adrf.com.
Opting out of marketing will not prevent us from sending necessary transactional, administrative or legal communications.
15. Children’s Personal Information
For purposes of POPIA, a child is generally a natural person under the age of 18 years who is not legally competent, without the assistance of a competent person, to take a particular action or decision.
ADRF Foundation does not knowingly collect or process children’s personal information through its online commercial activities without the consent of a parent, guardian or other competent person, unless the processing is otherwise permitted by law.
Where ADRF Foundation programmes involve children, appropriate consent and safeguarding measures will be applied.
If you believe personal information relating to a child has been submitted to us improperly, please contact us at info@adrf.com.
16. Your Rights
Subject to POPIA and other applicable laws, you may have the right to:
- ask whether ADRF Foundation holds personal information about you;
- request access to your personal information;
- request correction or updating of inaccurate information;
- request deletion or destruction of personal information where legally permitted;
- object to certain processing of your personal information;
- object to direct marketing;
- withdraw consent where processing is based on consent; and
- lodge a complaint with the Information Regulator.
Requests may be sent to info@adrf.com.
We may require reasonable verification of identity before providing access to, correcting or deleting personal information.
17. Complaints to the Information Regulator
If you believe that ADRF Foundation has processed your personal information contrary to POPIA, you may first contact us so that we can attempt to resolve the matter.
You also have the right to lodge a complaint with the Information Regulator (South Africa):
|
Office |
Information Regulator (South Africa) |
|
Address |
Woodmead North Office Park |
|
Telephone |
|
|
|
The Information Regulator also provides electronic services for POPIA complaints.
18. Third-Party Websites
The ADRF Foundation website may contain links to external websites or services operated by third parties.
ADRF Foundation is not responsible for the privacy practices, security or content of those third-party websites. Users should review the applicable privacy notices before providing personal information to third parties.
19. Changes to This Privacy Policy
ADRF Foundation may update this Privacy Policy periodically to reflect changes in:
- our operations;
- website functionality;
- payment arrangements;
- service providers;
- applicable legislation; or
- regulatory requirements.
The current version will be published on the ADRF Foundation website and will show its effective date and last-updated date.
20. Contact Us
Questions, requests or complaints concerning this Privacy Policy or the processing of personal information may be directed to:
| Organisation | ADRF Foundation Africa Diaspora Revival Fund NPC |
| Address |
21 Tweedracht, Boschkop,
PRETORIA, 0002, Gauteng, South Africa.
|
| info@adrffoundation.org | |
| Website | adrffoundation.org |