Privacy Policy

This Privacy Notice explains how the Bongani Mayosi Foundation (“we”, “us”, “our”) processes personal information in line with the Protection of Personal Information Act, 4 of 2013 (“POPIA”).

1) Who we are

We are the responsible party for personal information processed via this website, the application portal, and our donor portal.

• Address: 12 Mead Way, Pinelands, Cape Town, 8000, South Africa
• Email: info@bonganimayosi.co.za

2) Scope

This notice applies to visitors, applicants, students, donors, and anyone who interacts with our services.

3) The personal information we collect

• Identity & contact: name, surname, mobile number, email address, student number.
• Education: institution, qualification, qualification level/type, proof of registration, certified fees statements, academic status.
• Profile content (students): profile photo, biography, institution and qualification, donation progress, application status.
• Donor details: donor name/surname or corporate name, donor ID, contact details, donation history.
• Usage data: site logs and cookies (see Cookies & analytics).

Special personal information: We do not intentionally collect special categories via this site. Please do not include such information unless requested and explained.

4) How we obtain personal information

• Directly from you (forms, uploads, email, WhatsApp donor-ID requests).
• Automatically via our website (cookies/analytics, security logs).
• From third parties (e.g., your institution for verification, payment/messaging providers), where lawful and necessary.

5) Purposes and lawful bases under POPIA

1. Application intake and assessment (receive, verify, evaluate sponsorship applications).
   Lawful bases: consent; steps at your request; legitimate interests.
2. Student profiles & fundraising (display limited profile information so donors can support students).
   Lawful bases: consent; legitimate interests.
3. Managing sponsorships & donations (allocate funds, track progress, confirmations, records).
   Lawful bases: consent; legal obligation; legitimate interests.
4. Communications (application, account, donation and important updates; optional impact stories with opt-out).
   Lawful bases: consent; legitimate interests.
5. Security, fraud prevention & compliance.
   Lawful bases: legal obligation; legitimate interests.

6) What we publish on this platform (students)

With your explicit consent given in the application form, we may display: full name, profile photo, biography, institution, qualification/level, and donation progress. We do not publish sensitive documentation (ID copy, fees statement, proof of registration). You can withdraw consent at any time; we will unpublish your profile going forward.

7) Who we share information with (designated recipients)

• Designated Foundation staff/committee members and, where necessary, your institution (verification).
• Service providers for payments, email/WhatsApp delivery, hosting, storage, security, analytics (under contract).
• Auditors, advisors, and authorities where required by law.

We do not sell your personal information.

8) Cross-border transfers

Where service providers process data outside South Africa, we implement safeguards consistent with POPIA (e.g., contractual protections and security controls).

9) Retention

We retain personal information only as long as necessary for the stated purposes or as required by law, after which we de-identify or securely delete it.

• Applications & supporting documents: typically up to 5 years from decision/last interaction.
• Donor/financial records: 7 years (or longer if legally required).
• Website logs: up to 12 months, unless needed for security investigations.

10) Security

We apply administrative, technical, and physical safeguards (e.g., role-based access, encryption in transit, least-privilege, audit logging). We will notify you and the Information Regulator of qualifying security compromises as required by POPIA.

11) Your rights under POPIA

You have the right to access, correct, object, restrict processing (where applicable), withdraw consent, and request deletion where no legal basis for retention applies. You may also lodge a complaint with the Information Regulator.

• Information Regulator (SA): https://inforegulator.org.za/
• Email: POPIAComplaints.IR@justice.gov.za

To exercise your rights, email info@bonganimayosi.co.za. We may need to verify your identity.

12) Direct marketing

We may send optional updates or impact stories to donors/supporters. You can opt out at any time via the unsubscribe link or by contacting us.

13) Cookies & analytics

We use essential cookies for security/functionality and limited analytics to improve the site. You can manage cookies in your browser; blocking some may affect functionality.

14) Children

Our programmes are intended for tertiary students. If you are under 18, please obtain parental/guardian consent before submitting personal information.

15) Changes to this notice

We may update this notice from time to time and will post the updated version with a new effective date. Material changes will be highlighted where practicable.

16) How to contact us

• Email: info@bonganimayosi.co.za
• Address: 12 Mead Way, Pinelands, Cape Town, 8000, South Africa

Annex A: Summary of public vs private (students)

---