Hoop Africa Foundation ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://www.hoopafrica.org or engage with our services. This policy is designed to comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the Tanzania Data Protection Act, and other relevant legislation.
Table of Contents
1. Information We Collect
We may collect the following categories of personal information:
1.1 Information You Provide Directly
- Contact Information: Name, email address, phone number, and postal address when you contact us, subscribe to our newsletter, or submit forms on our website.
- Donation Information: Payment details and billing information when you make a donation (processed securely through third-party payment processors).
- Volunteer and Career Applications: Professional information, CV/resume, and related data when you apply for positions or volunteer opportunities.
- Communications: The content of messages, emails, and other communications you send to us.
1.2 Information Collected Automatically
- Device and Browser Information: IP address, browser type, operating system, device identifiers, and screen resolution.
- Usage Data: Pages visited, time spent on pages, referring URLs, click patterns, and navigation paths.
- Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar technologies. See our Cookie Policy for details.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To respond to your inquiries, process donations, and provide the services you request.
- To send you updates, newsletters, and communications about our programs and impact (with your consent where required).
- To process and manage volunteer and employment applications.
- To improve our website, services, and user experience through analytics.
- To comply with legal obligations and protect our legitimate interests.
- To detect, prevent, and address security issues, fraud, or technical problems.
- To fulfill any other purpose for which you provide consent.
3. Legal Bases for Processing (GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction that requires a legal basis for processing personal data, we rely on the following:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., subscribing to our newsletter).
- Contractual Necessity: Where processing is necessary to fulfill a contract or take steps at your request prior to entering into a contract.
- Legitimate Interests: Where processing is necessary for our legitimate interests (such as improving our services), provided those interests are not overridden by your rights.
- Legal Obligation: Where processing is necessary to comply with a legal requirement.
4. Sharing and Disclosure of Information
We do not sell your personal information. We may share your data in the following limited circumstances:
- Service Providers: With trusted third-party vendors who assist us in operating our website, processing donations, sending communications, and providing other services, under strict confidentiality agreements.
- Legal Requirements: When required by law, regulation, legal process, or governmental request.
- Protection of Rights: To protect the rights, property, or safety of Hoop Africa Foundation, our users, or the public.
- With Your Consent: For any other purpose disclosed to you at the time of collection, with your consent.
5. International Data Transfers
As an organization operating across multiple African countries (Namibia, Tanzania, and the Democratic Republic of Congo), your information may be transferred to and processed in countries other than the one in which it was collected. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable law, including:
- Standard Contractual Clauses approved by relevant authorities.
- Adequacy decisions where the receiving country provides adequate data protection.
- Your explicit consent where other safeguards are not available.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Specific retention periods include:
- Contact inquiries: Up to 2 years after the last interaction.
- Donation records: As required by applicable tax and financial regulations (typically 7 years).
- Newsletter subscriptions: Until you unsubscribe or withdraw consent.
- Application data: Up to 12 months after the recruitment process concludes.
- Website analytics: Up to 26 months.
7. Your Rights and Choices
Depending on your location and applicable law, you may have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data, subject to legal obligations.
- Right to Restrict Processing: Request that we limit the processing of your data in certain circumstances.
- Right to Data Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.
To exercise any of these rights, please contact us using the details in Section 13 below. We will respond to your request within 30 days (or as required by applicable law).
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our website. For detailed information about the types of cookies we use, how to manage your cookie preferences, and your choices, please refer to our Cookie Policy.
9. Children's Privacy
Our website is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us immediately.
10. Security Measures
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (SSL/TLS), secure server environments, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
11. Third-Party Links
Our website may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices or content of third-party websites.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you via email or a prominent notice on our website. We encourage you to review this policy periodically.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Hoop Africa Foundation
Data Protection Inquiries
Namibia: +264 81 302 2416 (Windhoek)
Tanzania: +255 755 731 262 (Dar es Salaam)
DR Congo: +243 829 494 537 (Kinshasa)
Website: https://www.hoopafrica.org
If you are not satisfied with our response, you may have the right to lodge a complaint with a supervisory authority in your jurisdiction.
