Donate
Facebook Instagram Linkedin

1. Introduction / Who We Are

Little Eden (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store, and share personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA). POPIA+2MLV Law+2

2. Information We Collect

When you interact with our website (littleeden.org.za), make a donation, sign up for updates, or otherwise communicate with us, we may collect:

  • Personal / identifying information: name, surname, email address, phone number, physical / postal address

  • Demographic information: city, province, country

  • Payment information: if you donate, we may collect banking or payment card details (via secure payment processor)

  • Technical information: IP address, device type, browser type, pages you visit, how long you spend on our site, and cookies / analytics data

  • Communications: any messages you send us through contact forms, email, or other channels

3. Why We Collect Your Information

We collect and use personal information for the following purposes:

  1. To provide and improve our services — enabling you to donate, subscribe, ask questions, or access information about Little Eden.

  2. To communicate with you — for newsletters, donation confirmations, updates about our projects, or in response to your inquiries.

  3. To comply with legal obligations — for financial reporting, tax compliance, or other regulatory requirements.

  4. To protect our operations — in order to detect fraud, secure our website, and ensure the integrity of our systems.

  5. Analytics & website performance — to understand how our site is used and how we can improve it (with your consent, where required).

4. Lawful Basis for Processing (POPIA)

Under POPIA, we process your personal information only when we have a lawful basis, such as:

  • Consent: You agree to us collecting and processing your information (e.g., when you sign up for our newsletter or make a donation). MyPopi Compliance

  • Contract: Processing is necessary to fulfill a contract or donation transaction. MyPopi Compliance+1

  • Legal obligation: We need to store or process certain data to comply with relevant laws. POPIA

  • Legitimate interest: For instance, to protect our website, prevent fraud, or carry on our mission in a prudent way.

5. How We Share / Disclose Your Information

We may disclose your personal information to:

  • Service providers / Operators: For example, payment gateways, email newsletter providers, web hosting, and analytics services.

  • Partners: Organisations we work with to deliver our mission, but only to the extent necessary for that purpose.

  • Legal or regulatory bodies: If required by law (e.g., reporting, audit).

  • With your consent: For specific purposes not covered above (e.g., third-party campaigns).

Whenever we share your data, we will ensure there are appropriate safeguards (e.g., contracts) so that your data is protected.

6. Data Security & Retention

  • We implement reasonable technical and organisational measures to protect your information from unauthorized access, loss, or damage (e.g., encryption, secure servers). South African Sugar Industry+1

  • We retain your personal data only for as long as necessary for the purposes for which we collected it (or as required by law). South African Sugar Industry

  • When personal data is no longer needed, we will securely delete or anonymise it.

7. Cross-Border Transfers

If, in any case, your personal information needs to be transferred outside South Africa (for example, to a cloud service provider in another country), we will:

  • Ensure the destination country provides a suitable level of data protection; or

  • Use contractual safeguards to make sure your data is protected at a POPIA-equivalent standard. Clym.io

8. Your Rights (Under POPIA)

As a data subject, you have the following rights:

  • Access: You can request access to the personal information we hold about you. Popia Checklist+1

  • Correction / Updating: If your details are incorrect or incomplete, you can ask us to correct them. Clym.io

  • Deletion: You may ask us to delete or destroy your personal information under certain circumstances. Eversheds Sutherland

  • Objection: You can object to certain types of processing (e.g., for direct marketing) where relevant. EY Assets

  • Withdraw Consent: If we process your data based on your consent, you can withdraw that consent at any time. Popia Checklist

  • Lodge a Complaint: If you believe we have misused your personal information, you can contact our Information Officer (see below), or lodge a complaint with the Information Regulator. Eversheds Sutherland

Photos of children used with permission in accordance with the Protection of Personal Information Act (POPIA), the Children’s Act (Act 38 of 2005), and all applicable South African legislation.

 

9. Information Officer

We have appointed an Information Officer responsible for POPIA compliance:

  • Email: info@littleeden.co.za

If you have any questions or want to exercise your rights (e.g., access, correction), please contact them.

10. Data Breach / Security Incidents

If there is a data breach or unauthorized access to your personal information that may pose a risk to your rights:

  1. We will notify you as soon as reasonably possible. Eversheds Sutherland

  2. We will also report the breach to the Information Regulator, if required by POPIA. Eversheds Sutherland

11. Cookies & Tracking

  • Our website may use cookies and similar tracking technologies to improve your experience, monitor usage, and analyse how visitors use the site.

  • You can manage or disable cookies via your browser settings.

  • When necessary, we will ask for your consent before placing non-essential cookies.

12. Direct Marketing

  • We will only send you marketing communications (emails, SMS, newsletters) if you have given your explicit consent (opt-in). Eversheds Sutherland

  • You can opt out / unsubscribe from these communications at any time (via a link in emails or by contacting us).

13. Children’s Privacy

  • If you are under 18, you must have the consent of a parent or guardian to provide us with personal information.

  • We do not knowingly collect personal information from minors without such consent.

14. Changes to This Privacy Policy

  • We may update this Privacy Policy from time to time (e.g., to reflect legal changes or how we operate).

  • When we make material changes, we will notify you (for example by emailing you or posting a notice on our website).

  • The version of this policy in effect at the time you provided your personal info will govern how we handle it.

15. Contact Us

If you have any questions about this Privacy Policy or how we process your personal information, or want to exercise your rights under POPIA, please contact: