Privacy & Security Policy
1. Our Commitment to Your Privacy
At Lasting Impact, trust is at the heart of everything we do.
Whether you are making a once-off donation, becoming a monthly supporter, partnering with us as a business or volunteering your time, we recognise the importance of protecting the personal information you share with us.
Our mission is to bring hope and practical assistance to vulnerable communities through education, feeding programmes and outreach initiatives.
We believe that the same care and respect we show the people we support should extend to everyone who supports our mission.
This Privacy & Security Policy explains how we collect, use, store, protect and share personal information.
Lasting Impact (Pty) Ltd is a South African private company and is not currently registered as a Non-Profit Organisation (NPO) or approved Public Benefit Organisation (PBO).
We are committed to handling personal information responsibly and in accordance with applicable legislation, including South Africa’s Protection of Personal Information Act (POPIA).
2. Information We Collect
Depending on how you interact with us, we may collect the following information:
Personal information
- Organisation or company name
- Communication preferences
Donation and payment information
- Donation amounts and dates
- Donation reference numbers
- Payment confirmation details
- Selected donation programmes
- Monthly contribution preferences
- Transaction records supplied by payment providers
Volunteer and partnership information
- Volunteer registration details
- Areas of interest and availability
- Business and corporate partnership enquiries
- Relevant identification or emergency contact information where necessary
- Information required to coordinate outreach activities safely
Website information
When you visit our website, certain technical information may be collected automatically, including your IP address, browser type, device information, pages visited and website interaction data.
We only aim to collect information reasonably necessary for legitimate organisational, operational and programme purposes.
3. How We Use Your Information
Lasting Impact may process personal information for the following purposes:
- Processing donations and financial contributions.
- Administering monthly and recurring donations.
- Sending payment confirmations and donation acknowledgements.
- Responding to enquiries and support requests.
- Managing volunteer registrations and outreach participation.
- Coordinating corporate partnerships and sponsorships.
- Providing programme updates and impact reports.
- Maintaining accurate financial and operational records.
- Improving our website and donation experience.
- Detecting and preventing fraudulent transactions.
- Complying with applicable legal obligations.
Where required, we will obtain your consent before using personal information for additional purposes.
We will not use your personal information for purposes incompatible with those for which it was lawfully collected.
4. Donations and Payment Security
We understand that supporters need confidence when making financial contributions.
Online donations may be processed through reputable third-party payment service providers.
Where applicable, payment information is transmitted and processed using the security arrangements provided by the relevant payment service.
Lasting Impact does not intend to store complete bank card numbers or card security codes on its own website systems.
We may retain payment references, transaction confirmations and limited payment information required for recordkeeping, reconciliation and donor support.
Payment providers operate under their own privacy and security policies.
We encourage donors to ensure they are using our official website and verified payment channels before making a contribution.
No internet transaction can be guaranteed to be completely risk-free.
5. Monthly Donations and Recurring Payments
When you register for recurring contributions, we may retain the information necessary to administer your selected donation arrangement.
Recurring payment authorisations may be managed by our appointed payment provider.
You may request the cancellation of recurring donations by contacting:
hello@lastingimpact.co.za
Cancelling a recurring donation will not automatically remove transaction records that we are required to retain for financial, legal or compliance purposes.
6. Protecting Children and Vulnerable Individuals
Protecting the dignity, privacy and safety of the people we support is one of our highest priorities.
Our initiatives may involve children, individuals living in shelters and other vulnerable community members.
We aim to ensure that personal information relating to beneficiaries is collected only where necessary and processed lawfully.
Information relating to children will be handled with particular care, including obtaining appropriate consent or other lawful authorisation where required.
We will not knowingly publish a child’s personal details, address, school information or identifiable images without the necessary permissions and safeguarding considerations.
We also aim to ensure that photographs, videos and stories shared from our outreach programmes respect the dignity and privacy of the people involved.
No beneficiary should be required to sacrifice their personal dignity or privacy in exchange for assistance.
7.Photographs, Videos and Impact Stories
Lasting Impact may share photographs, videos, testimonials and stories to demonstrate the impact of our programmes and encourage public participation.
Before publishing identifiable personal information, we will obtain appropriate permission where required.
We may use images and stories in:
- Community outreach communications
Where suitable, we may use anonymised information to protect beneficiary identities.
Individuals may contact us to raise concerns about published personal information or request its removal. Requests will be considered in accordance with applicable law and safeguarding obligations.
8.How We Protect Your Information
Lasting Impact is committed to implementing reasonable technical and organisational safeguards to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These safeguards may include:
- Secure website connections using HTTPS.
- Restricted access to donor and beneficiary records.
- Password protection and access controls.
- Secure payment processing through authorised providers.
- Regular website and software security maintenance.
- Appropriate data backup and recovery procedures.
- Internal confidentiality practices.
- Review of service providers that process information on our behalf.
We will review and improve our security arrangements as our organisation and digital platforms develop.
While we take reasonable precautions, no electronic storage or transmission system can be guaranteed to be entirely secure.
9. Sharing Your Personal Information
We do not sell personal information to third parties.
We may share information where reasonably necessary with:
- Payment processing providers.
- Website hosting and technical service providers.
- Accounting and professional advisers.
- Email and communication service providers.
- Authorised programme coordinators.
- Partner organisations involved in delivering agreed assistance, where lawful and necessary.
- Regulators, law enforcement agencies or other authorities where legally required.
We aim to ensure that third parties handling personal information on our behalf apply appropriate confidentiality and data protection measures.
10. International Donors and Data Transfers
Lasting Impact welcomes support from individuals and organisations around the world.
Where personal information is transferred or accessed outside South Africa, we will take steps to ensure such transfers comply with applicable data protection requirements, including POPIA.
Where relevant, we will also consider applicable privacy requirements in other jurisdictions.
International payment providers or technology services may process information outside South Africa.
11. Cookies and Website Analytics
Our website may use cookies and similar technologies to improve functionality, remember preferences, support secure donations and understand website usage.
Depending on the services enabled on our website, cookies may include:
- Essential cookies required for website operation.
- Functional cookies that remember preferences.
- Analytics cookies that help measure website performance.
- Marketing cookies, where applicable and lawfully permitted.
You can manage cookies through your browser settings and, where provided, our website’s cookie preference controls.
Disabling certain cookies may affect website functionality.
We will provide additional information about specific cookies and tracking services where required.
12. Marketing and Communication Preferences
Supporters may choose to receive updates about our feeding programmes, education projects, community outreach and partnership opportunities.
Communications may include email newsletters, SMS messages or other approved communication channels.
We will send electronic direct marketing in accordance with applicable law.
Where consent is required, we will obtain it before sending promotional communications.
You may withdraw marketing consent or unsubscribe at any time by following the instructions in the relevant communication or contacting:
hello@lastingimpact.co.za
Please note that essential communications relating to donations, payments or requested services may still be sent where legally permitted or necessary.
13. Your Rights Under POPIA
Subject to applicable legal requirements, you may have the right to:
- Ask whether we hold personal information about you.
- Request access to your personal information.
- Request correction of inaccurate or outdated information.
- Request deletion or destruction of information where legally permitted.
- Object to certain processing activities.
- Withdraw consent where processing relies on consent.
- Request information about how your personal information is used.
- Submit a complaint to the Information Regulator.
To exercise your rights, please email: hello@lastingimpact.co.za
We may request reasonable identity verification before processing a request to protect personal information from unauthorised disclosure.
We will respond within applicable legal timeframes.
14. Data Retention
Lasting Impact will retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or where continued retention is required or permitted by law.
Donation and financial records may need to be retained for accounting, tax and other legal obligations.
Other personal information may be deleted, de-identified or securely destroyed when no longer required, subject to applicable retention requirements.
Withdrawal of marketing consent does not necessarily require deletion of records that must lawfully be retained.
15. Data Security Incidents
If we become aware of a security incident involving personal information, we will investigate the incident and take appropriate steps to contain and address it.
Where required under POPIA, we will notify the Information Regulator and affected individuals as soon as reasonably possible, subject to applicable legal provisions.
We may also provide information about steps affected individuals can take to protect themselves.
Suspected privacy or security concerns can be reported to: hello@lastingimpact.co.za
16. Third-Party Websites
Our website may contain links to third-party websites, social media platforms, payment providers or partner organisations.
Lasting Impact is not responsible for the privacy practices or content of independent third-party websites.
We encourage visitors to review the privacy policies of websites they access through external links.
17. Changes to This Policy
We may update this Privacy & Security Policy from time to time to reflect changes in legislation, organisational operations, technology or website functionality.
Any updated policy will be published on our website with a revised effective date.
Where legally required, we will provide additional notification or obtain consent for material changes to personal information processing.
18. Contact and Privacy Enquiries
For questions regarding this Privacy & Security Policy, requests to access or correct personal information, or concerns about information security, please contact:
Lasting Impact (Pty) Ltd
Website: https://www.lastingimpact.co.za
Email: hello@lastingimpact.co.za
Country: South Africa
Company registration number: Number allocation in process
Registered business address: 3 Piet Retief Road, Harveston AH, Roodepoort, South Africa
Information Officer: Tyron Le Roux
You may also contact the South African Information Regulator through its official website:https://inforegulator.org.za
Our Promise
Your trust matters. Your privacy matters. And the dignity of every person we support matters.
At Lasting Impact, we believe that compassion must always be accompanied by integrity, transparency and responsibility.
We may not be able to change the whole world, but together we can change the world for someone.
Together, we can create a Lasting Impact.
