Charity CrowdfundWho we are.
Charity Crowdfund NPC is a South African non-profit company. We run weekly bread distribution, cooked meals, waterwells and other projects, funded by people who give through this website, by EFT and by WhatsApp.
Under the Protection of Personal Information Act, 2013 (POPIA), we are the responsible party for the personal information described here. That means we decide what is collected and why, and we answer for how it is looked after.
What we collect.
When you donate online
Your cellphone number, the project you choose, the amount, and your intention if you pick one. If you schedule a monthly gift we also ask for your email address. Payments are made on PayFast's secure page, so we never see or store your card or bank details. PayFast tells us whether the payment went through, with your name and email address.
When you pay by EFT
The amount, the date and the reference you type, which we ask to be your cellphone number and the project, as they appear on our bank statement.
Section 18A tax certificates
If you ask for a tax certificate we need your full name, ID or tax number, postal address, email address and phone number, because SARS requires them on the certificate.
Little Givers (children giving)
A parent or guardian gives us the child's first name, age, gender and chosen project, and their own name, cellphone number and email address. We use these to process the gift and make the child's certificate.
Events
When you sign up for an event such as the Spring Hike, we ask for your name, cellphone number, email address, how many adults and children are coming, and T-shirt sizes. A business that sponsors an event may give us its website, logo and a short description, which we publish on the sponsor wall.
Messages you send us
What you send us by WhatsApp or email, including photos or documents such as a proof of payment, and your WhatsApp profile name.
Things you choose to make public
On a family campaign guestbook, the name, town and message you write are shown on the page. In a Khatm circle, the name you choose is shown to the other people in that circle.
How the website is used
We run our own simple analytics. A random code in a cookie tells us when the same browser comes back, and we record the pages opened, time spent on them, the type of device and browser, screen size, language, the site or campaign link you came from, and a shortened IP address with the last part removed. If you type your cellphone number into a donation form, we link that browser to the number, so we can see which pages help people give. If you give one of our nasheeds a thumbs up, we keep that like against the same random code, so the count is fair and you can take it back. The thank-you page after a donation also uses Google Analytics.
The donation site also uses the Meta Pixel. It tells Meta when a page is opened, when the Donate page is opened, and when a donation is started or completed (the amount and project, never your card details), so we can measure our Facebook and Instagram ads and show them to people who have visited. When PayFast confirms a donation made on the site, our server also tells Meta that it happened (the amount and project, with the Pixel's codes for your browser, its IP address and type), so it is counted even if the page was closed; we keep those codes for 30 days. If you use Facebook or Instagram, Meta can link this to your account. You can switch it off in your Meta ad settings, or by blocking third-party cookies.
Kept on your device only. Your cellphone number (if you tick "remember my number"), your settings in the apps, and your location for prayer times and the Qibla stay in your browser. Prayer times and the Qibla are worked out on your device, and your location is not sent to us.
Why we use it.
- To process your donation, match it to the right project, and send a receipt or Section 18A certificate.
- To thank you and confirm that your gift arrived.
- To answer your messages and questions.
- To run events you sign up for.
- To keep proper accounts and meet our legal duties as a non-profit company and public benefit organisation.
- To see how the website is used, so we can make giving simpler.
- To show our Facebook and Instagram ads to people likely to care about this work, and to keep donors out of ads meant for people who have not given yet.
We report on our work with totals: loaves, meals, wells and Rands. We do not publish donors' names unless you have asked us to.
We only send you WhatsApp messages or emails about your own donations, events you signed up for, or updates you agreed to receive. Tell us at any time and we stop.
How long we keep it.
Donation and tax certificate records are kept for at least five years, because tax law requires us to keep them. Messages, event sign-ups and website usage records are kept only as long as they are useful for the reason we collected them, and are then deleted or made anonymous. You can ask us to delete your information sooner, and we will, unless the law requires us to keep it.
How we protect it.
The whole website uses an encrypted connection. Only named members of our team can see personal information, each with their own login. Card details never reach us. Payment and message notifications from PayFast and WhatsApp are checked before we accept them, so nobody can feed us false ones.
If personal information is ever accessed by someone who should not have it, we will tell the people affected and the Information Regulator, as POPIA requires.
Children.
Little Givers lets children give their own money. The form is filled in by a parent or guardian, who agrees to us using the child's details to process the gift and make the certificate. We ask only for the child's first name, age and gender, and we never contact a child directly.
Your rights.
Under POPIA you may ask us:
- whether we hold personal information about you, and for a copy of it;
- to correct anything that is wrong or out of date;
- to delete it, where we are not required by law to keep it;
- to leave you out of what we share with Meta for our ads;
- to stop using it, or to stop sending you messages.
Write to us using the details below. We will confirm who you are before we share or change anything, and we will reply within 30 days.
If you are not happy with how we have handled your information, you may complain to the Information Regulator. We would be grateful for the chance to put it right first.
Contact us.
Questions about this policy or your information go to our Information Officer:
We may update this policy when our work changes. The date at the top shows when it last changed.