Privacy Notice (POPIA)

Effective date: 19 February 2026

Unashamedly Ethical NPC (“UE”, “we”, “us”) respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”).

This Privacy Notice explains what personal information we collect, why we collect it, how we use it, and the choices and rights you have.

1. Who we are (Responsible Party)

Responsible Party: Unashamedly Ethical NPC
Registration / NPO / PBO details: 2024/165131/08. NPO:310-198. PBO:930085859
Contact address: Lourensford Wine Estate, Lourensford Road, Somerset West, 7130.

2. What personal information we collect

We may collect the following personal information (depending on your interaction with us):

  • Identity and contact details (for example: name, email address, phone number, organisation)

  • Commitment and participation information (for example: ethical commitment sign-up details, programme participation details)

  • Correspondence you send us (for example: messages, enquiries, complaints)

  • Donation-related information (for example: donation amounts and transaction references processed by our donation platform)

  • Website and device information (for example: IP address, cookie identifiers, pages visited, browser/device type)

We do not intentionally collect special personal information unless it is specifically required and lawful to do so.

3. Why we collect and use your personal information

We process personal information to:

  • Record and administer Ethical Commitment sign-ups (individual and organisational)

  • Communicate with you about your involvement, enquiries, or requests

  • Send newsletters or movement updates only if you consent (marketing communications)

  • Administer donations and keep required financial records

  • Deliver and administer programmes and initiatives

  • Improve our website and user experience

  • Protect our systems, prevent fraud, and maintain security

  • Comply with legal and regulatory obligations

4. Lawful basis for processing

We process personal information based on one or more of the following:

  • Your consent (especially for direct marketing / newsletters)

  • Our legitimate interests in operating the movement and administering programmes responsibly

  • Performance of an arrangement with you (where applicable)

  • Compliance with legal obligations

5. How we collect personal information

We collect personal information:

  • Directly from you (forms, sign-ups, subscriptions, emails, and other communications)

  • From our website through cookies and similar technologies

  • From trusted partners/service providers only where necessary to provide the service (for example: donation processing)

6. Who we share personal information with

We may share personal information with:

  • Service providers (“operators”) who help us run the website, forms, email communications, analytics, and donation processing

  • Professional advisors (for example: auditors, legal or IT support) where necessary

  • Regulators or authorities where required by law

We only share what is necessary for the purpose, and we require appropriate confidentiality and data protection safeguards.

7. Transborder data transfers

Some of our service providers may process or store personal information outside South Africa. Where personal information is transferred across borders, we will ensure appropriate safeguards and adequate protection as required by POPIA.

8. Security

We implement reasonable technical and organisational safeguards to protect personal information against loss, misuse, unauthorised access, or disclosure.

9. Retention

We keep personal information only for as long as necessary for the purpose for which it was collected, or as required by law, and then securely delete or de-identify it.

10. Your rights

You have rights under POPIA, including the right to:

  • Request access to your personal information

  • Request correction, deletion, or destruction of your personal information

  • Object to processing (including objection to direct marketing)

  • Withdraw consent where processing is based on consent

  • Lodge a complaint with the Information Regulator

11. Requests and complaints (POPIA)

All data subject access requests and POPIA complaints must be submitted in writing to the Deputy Information Officer:

Deputy Information Officer: Ilene Power
Email: ilene@unashamedlyethical.com
Phone: (+27)21-123 3307

We acknowledge POPIA complaints within five business days and aim to resolve complaints within four weeks, where reasonably possible.

If you are not satisfied with how we handle your personal information, you may contact the Information Regulator:

Information Regulator (South Africa)
Physical Address: SALU Building, 316 Thabo Sehume Street, Pretoria
Email: inforeg@justice.gov.za
Website: justice.gov.za/inforeg

12. Updates to this Privacy Notice

We may update this Privacy Notice from time to time. The latest version will always be available on our website.