- Status
- Published
- Version
- 1.0
- Effective
- 19 June 2026
- Last reviewed
- 19 June 2026
- Review cycle
- Annually
- Last updated
- 19 June 2026
1. Who we are
Sister EF Legacy of Purpose Foundation (“the Foundation”, “we”, “us”) is a humanitarian non-profit inspired by the life and legacy of Sr. Elizabeth Funie Shabalala. We are the data controller for personal information collected through our website (eflegacy.org), forms, programs and partnerships.
2. Information we collect
We collect only what we need to serve you. This may include:
- Identity and contact details (full name, email, phone, country, city) when you volunteer, partner, donate or contact us.
- Volunteer details such as skills, interests, availability and motivation.
- Donation and partnership details, including amounts pledged and preferred payment methods.
- Technical information your browser shares automatically: IP address, device, browser type, and pages visited.
- Content you choose to submit, including stories, tributes or correspondence.
3. How we use your information
- To respond to your enquiry, application or donation.
- To match volunteers to opportunities and partners to programs.
- To send confirmations, acknowledgements, receipts and important updates.
- To improve our website, programs and impact reporting.
- To comply with legal, financial and safeguarding obligations.
4. Lawful basis
We process your information on the basis of your consent, our legitimate interest in operating a humanitarian foundation, and where necessary to comply with the law (including the Protection of Personal Information Act, 2013 of South Africa, and equivalent laws in jurisdictions where we operate).
5. Sharing your information
We do not sell personal information. We share it only with vetted service providers (such as email delivery, hosting and payment processors) under written agreements that require them to protect it, and with regulators when legally required.
6. International transfers
Some of our service providers operate outside South Africa. When information leaves the country, we ensure equivalent protection through contractual safeguards.
7. Retention
We keep personal information only as long as needed for the purpose it was collected and for any legal record-keeping requirement. Donation records are retained for at least seven years. Volunteer applications are retained for the duration of your engagement with us and three years thereafter.
8. Your rights
You may at any time request to:
- Access the personal information we hold about you.
- Correct or update inaccurate information.
- Withdraw consent or unsubscribe from communications.
- Request deletion of your information, subject to legal retention requirements.
- Lodge a complaint with the Information Regulator (South Africa) or the relevant authority in your country.
9. Security
We use industry-standard technical and organisational measures to protect your data, including encryption in transit, restricted access, audit logging and regular security reviews.
10. Children
We do not knowingly collect personal information from children under 18 without parental or guardian consent. If you believe a child has provided information to us without consent, please contact us so we can remove it.
11. Contact
For any privacy question or request, email info@eflegacy.org.
Questions about this policy? Email info@eflegacy.org and a member of our team will respond within five working days.