privacy policy

This Notice explains how we obtain, use and disclose your personal information, in accordance with the requirements of the Protection of Personal Information Act (“POPIA”).

At CON BRIO we are committed to protecting your privacy and to ensure that your personal information is collected and used properly, lawfully and transparently.

About the Company
Con Brio Cares NPO 313-612

The information we collect

We collect and process your personal information mainly to contact you for the purposes of understanding your requirements and delivering services accordingly. For this purpose, we will collect contact details including your name and organisation.

We collect information directly from you where you provide us with your personal details.

Where possible, we will inform you what information you are required to provide to us and what information is optional.

Website usage information may be collected using “cookies” which allows us to collect standard internet visitor usage information.

How we use your information

We will use your personal information only for the purposes for which it was collected and agreed with you. In addition, where necessary your information may be retained for legal or research purposes.

1. Collection of Section 18A Information

• Purpose of Collection: Disclose that personal information (such as names, tax numbers, and donation details) is collected for issuing Section 18A tax certificates,
  which allow donors to claim tax deductions for their contributions to the NPO.
• Lawful Basis: The collection of such information is mandatory under tax laws (Income Tax Act) and is necessary for the legal obligations of the NPO to issue
  Section 18A certificates.
• Types of Information Collected:
  o Donor’s full name
  o Donor’s tax reference number
  o Amount donated
  o Date of donation
  o Type of donation (cash or in-kind)
• Retention of Data: Disclose how long this information will be stored, referencing any legal or tax-related retention periods (e.g., typically 5 years as per South African tax law).
• Data Sharing: Indicate whether this information will be shared with SARS or any other third parties, such as auditors or legal advisors, strictly for compliance purposes.
• Collection and Use of Home Address Information

  Purpose of Collection:

  Home address information is collected, such as for donation receipts, tax certificates, mailing lists, or delivery of goods (like physical donations or volunteer kits).

  Data Protection: Reassure users that their home address will be stored securely and only used for the purposes disclosed.

  Third-Party Sharing: In some instances, home addresses are shared with delivery services or third-party partners (e.g., for mailing donation receipts or delivering goods), but we take care to use partners with strict privacy policies in this regard.

  User Rights: You have the rights to access, correct, or delete your home address information from your records as per the above clauses.

We collect personal information, including details required for Section 18A tax certificates, such as your full name, donation amount, tax reference number, and donation date, in compliance with South African tax laws. This information is necessary for issuing tax-deductible donation receipts and will be securely stored and retained for the period required by law. Additionally, we may collect your home address for the delivery of goods or mailing purposes. Your information will only be shared with authorized third parties, such as SARS or our service providers, to meet these legal obligations. You have the right to access, update, or request deletion of your personal information at any time.

For example:

• To gather contact information;
• To confirm and verify your identity or to verify that you are an authorised user for security purposes;
• For the detection and prevention of fraud, crime, money laundering or other malpractice;
• To conduct market or customer satisfaction research or for statistical analysis;
• For audit and record keeping purposes;
• In connection with legal proceedings.

Disclosure of information
We may disclose your personal information to our service providers who are involved in the delivery of products or services to you. We have agreements in place to ensure that they comply with the privacy requirements as required by the Protection of Personal Information Act.

We may also disclose your information:

• Where we have a duty or a right to disclose in terms of law or industry codes;
• Where we believe it is necessary to protect our rights.

Information Security
We are legally obliged to provide adequate protection for the personal information we hold and to stop unauthorized access and use of personal information. We will, on an on-going basis, continue to review our security controls and related processes to ensure that your personal information remains secure.

Our security policies and procedures cover:

• Physical security;
• Computer and network security;
• Access to personal information;
  Secure communications;
• Security in contracting out activities or functions;
• Retention and disposal of information;
• Acceptable usage of personal information;
• Governance and regulatory issues;
• Monitoring access and usage of private information;
• Investigating and reacting to security incidents.

When we contract with third parties, we impose appropriate security, privacy and confidentiality obligations on them to ensure that personal information that we remain responsible for, is kept secure.

We will ensure that anyone to whom we pass your personal information agrees to treat your information with the same level of protection as we are obliged to.

Your Rights: Access to information

You have the right to request a copy of the personal information we hold about you. To do this, simply contact us at the numbers/addresses as provided on our website and specify what information you require. We will need a certified copy of your ID document to confirm your identity before providing details of your personal information. Please note that any such access request may be subject to a payment of a legally allowable fee.

Correction of your information
You have the right to ask us to update, correct or delete your personal information. We will require a certified copy of your ID document to confirm your identity before making changes
to personal information we may hold about you. We would appreciate it if you would keep your personal information accurate.

Definition of personal information

According to the Act ‘‘personal information’’ means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person. Further to the POPI Act, COR Concepts also includes the following items as personal information:

• All addresses including residential, postal and email addresses.
• Change of name – for which we require copies of the marriage certificate or official change of name document issued by the state department.

Disposal of Personal Information
Con Brio Cares is committed to ensuring that personal information is securely disposed of when it is no longer required for legal, business, or contractual purposes. We will follow the appropriate procedures to safely and effectively dispose of personal information, ensuring it cannot be reconstructed or accessed by unauthorized persons.

The methods of disposal include, but are not limited to:

• Securely deleting electronic data.
• Shredding or incinerating physical records.
• Using certified third-party disposal services that adhere to the Protection of Personal Information Act (POPIA) standards.

How to contact us

If you have any queries about this notice; you need further information about our privacy practices; wish to withdraw consent; exercise preferences or access or correct your personal information, please contact us at the numbers/addresses listed on our website.