Effective Date: 24 August 2026
Website: https://theoleenbrownfoundation.co.za

1. Introduction

The Theoleen Brown Foundation (“TBF”, “we”, “us”, “our”) is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website theoleenbrownfoundation.co.za and interact with our services.

We comply with the Protection of Personal Information Act (POPIA) of the Republic of South Africa, and where applicable, the General Data Protection Regulation (GDPR).

By using our website, you agree to this Privacy Policy.

2. Who We Are

The Theoleen Brown Foundation NGO
Website: https://theoleenbrownfoundation.co.za
Email: info@theoleenbrownfoundation.co.za
Location: Johannesburg, Gauteng, South Africa

We are the Responsible Party as defined by POPIA.

3. What Information We Collect

We only collect information that is necessary for our foundation’s work. This may include:

a) Information you give us directly:

  • Name, surname
  • Email address
  • Phone number
  • Physical address
  • Donation information (amount, but we NEVER store your full card / banking details – these are processed securely by our payment partners like Payfast, PayPal, etc.)
  • Messages you send via contact forms, email, or WhatsApp
  • Volunteer applications or beneficiary information

b) Information collected automatically:

  • IP address, browser type, device type
  • Pages visited, time spent on site
  • Cookies and similar technologies (see Section 7)

We do not knowingly collect sensitive personal information unless you voluntarily provide it for our programs.

4. How and Why We Use Your Information

We process your information for a lawful purpose, including:

  • To respond to your enquiries and messages
  • To process donations and issue donation receipts / Section 18A certificates
  • To run our foundation programs, outreach, and support services
  • To send newsletters, updates, and impact reports (you can opt-out anytime)
  • To improve our website and user experience
  • To comply with legal and regulatory obligations
  • To keep our website and beneficiaries safe and secure

We will never sell your personal information.

5. How We Share Your Information

We only share your information with:

  • Service Providers: Trusted third parties who help us run our website – e.g., web hosting, email provider, payment gateways, analytics (Google Analytics).
  • Legal Authorities: If required by law or to protect the rights and safety of TBF and our community.
  • With Your Consent: When you have explicitly agreed.

All third parties are required to keep your information secure and confidential.

6. Security

We take security seriously. We use technical and organizational measures to protect your data from loss, misuse, unauthorized access, or disclosure. Our website uses SSL encryption, secure hosting, and restricted access.

While we do our best, no system is 100% secure. If a data breach occurs, we will notify you and the Information Regulator as required by POPIA.

7. Cookies

Our website uses cookies to make your experience better.

  • Essential Cookies: Needed for the site to work.
  • Analytics Cookies: Help us understand how visitors use our site.
  • Functional Cookies: Remember your preferences.

You can disable cookies in your browser settings at any time. Some features of the site may not work properly if you do.

8. How Long We Keep Your Data

We keep your personal information only for as long as necessary to fulfill the purpose it was collected for, or as required by law (e.g., for donation / tax records, we are required to keep records for 5 years). Thereafter, it is securely deleted or de-identified.

9. Your Rights Under POPIA

You have the right to:

  1. Be informed about how your information is used
  2. Access the personal information we hold about you
  3. Request correction or deletion of your information
  4. Object to processing of your information
  5. Object to direct marketing and unsubscribe
  6. Lodge a complaint with the Information Regulator

To exercise any of these rights, email us at: info@theoleenbrownfoundation.co.za

If you are not satisfied with our response, you have the right to complain to:
The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: complaints.IR@justice.gov.za

10. Children’s Privacy

TBF serves communities including children. We do not knowingly collect personal information from children under 18 without parental/guardian consent. If we learn we have collected such data without consent, we will delete it immediately.

11. Links to Other Websites

Our website may contain links to other sites (e.g., social media, partners). We are not responsible for the privacy practices of those sites. Please review their privacy policies.

12. International Data Transfers

Your data is primarily stored in South Africa. If we transfer data outside South Africa (e.g., via Google or Mailchimp servers), we will ensure adequate protection is in place.

13. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated Effective Date. Please check back regularly.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your information, please contact us:

The Theoleen Brown Foundation NGO
Email: info@theoleenbrownfoundation.co.za
Website: https://theoleenbrownfoundation.co.za
Instagram: https://instagram.com/theoleenbrownfoundation

Thank you for trusting TBF 💙