Donate now

Privacy policy

Last updated: 22 October 2026

Rahab Beauty Foundation NPC ("Rahab", "we", "us") respects your privacy. Many of the people we work with have lived through abuse or trafficking, so we treat personal information with particular care. This policy explains what personal information we collect, why, how we protect it and what your rights are under the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who we are

Rahab Beauty Foundation NPC is a non-profit company registered in South Africa (registration number 2025/352119/08), based in Pretoria, Gauteng. We are the "responsible party" for the personal information described in this policy. Our registered address is recorded with the Companies and Intellectual Property Commission (CIPC) and is available on request.

2. Information we collect

We collect only what we need. Depending on how you interact with us, this may include:

  • Contact form and enquiries: your name, email address, phone number (optional), the subject you choose and your message.
  • Donors: your name or company name, contact details, the amount and date of your donation, the payment reference and any proof of payment you send us. We do not receive or store your card or online-banking login details; donations are made by bank transfer directly to our account.
  • Volunteers and partners: your name, contact details, and information you give us about your skills and availability.
  • People we support: see section 4.
  • Website use: technical information your browser sends automatically, such as your IP address, browser type and the pages you visit, kept in our server logs.

Giving us your information is voluntary. If you choose not to, we may not be able to reply to your enquiry, acknowledge your donation or involve you as a volunteer.

3. How we use it

We use personal information only for the purpose it was given, namely to:

  • reply to your messages and requests;
  • receive, record and acknowledge donations, and keep the financial records the law requires;
  • coordinate volunteers, donated goods and partnerships;
  • provide shelter and support services to the people we help (section 4);
  • keep our website secure and working properly.

We will only send you newsletters, fundraising appeals or other direct marketing if you have agreed to receive them, or if you are an existing donor and we have given you a chance to opt out. You can unsubscribe at any time. We never sell or rent your personal information.

4. People we support

When we help a woman or child, we may need sensitive information, such as details about their safety, health, family situation or legal matters. POPIA treats some of this as "special personal information" and information about children with extra protection. We:

  • collect it only with the person's consent (or a parent's or guardian's consent for a child), or where the law allows;
  • use it only to provide care, keep people safe and meet our legal duties;
  • limit access to the people directly involved in that person's care;
  • never publish names, photographs, locations or stories of the people we support without their clear, written consent;
  • do not disclose the location of any shelter.

We may share limited information without consent only where the law requires it, or where it is necessary to protect someone from serious harm, for example to report the abuse of a child as the Children's Act requires.

5. Who we share it with

We share personal information only when necessary, and only with:

  • service providers who help us operate, such as our website host, email provider, bank and accountants, who must keep it confidential and secure;
  • partner organisations, social workers, medical or legal professionals involved in someone's care, with that person's consent;
  • authorities such as SARS, the police or the courts, when the law requires it.

We may report donation totals to funders or in our annual reports, but we will not name individual donors without permission.

6. Information sent outside South Africa

Some of the services we use, such as email, cloud storage, web hosting and Google Fonts, may store or process information on servers outside South Africa. We only use providers that are bound by data-protection laws or agreements that give protection similar to POPIA.

7. Keeping information safe

We take reasonable technical and organisational steps to protect personal information against loss, misuse and unauthorised access, including password-protected accounts, limited access on a need-to-know basis, secure (HTTPS) connections on this website and locked storage for paper records. If we become aware of a security breach that affects your information, we will notify you and the Information Regulator as POPIA requires.

8. How long we keep it

We keep personal information only as long as we need it for the purpose it was collected, or as long as the law requires. As a guide:

  • enquiries through the contact form: up to 2 years after our last contact with you;
  • donation and financial records: as long as tax and company law requires, generally 5 to 7 years;
  • records of people we support: as long as needed for their care and as required by law.

After that, we delete or destroy the information, or anonymise it so it can no longer identify you.

9. Your rights

Under POPIA you have the right to:

  • ask whether we hold personal information about you and request a copy of it;
  • ask us to correct or update information that is wrong or incomplete;
  • ask us to delete information we no longer have a lawful reason to keep;
  • object to us using your information, including for direct marketing;
  • withdraw consent you have given, at any time (this does not affect what we did before);
  • lodge a complaint with the Information Regulator (see section 13).

To use any of these rights, email us at Rahab.beautyfoundation@gmail.com. We may ask you to confirm your identity before we act on a request.

10. Cookies and third-party services

This website only uses cookies that are needed for it to work, such as a security cookie that protects the contact form. We do not use advertising or tracking cookies.

Our pages load fonts from Google Fonts, which means your browser connects to Google's servers. Links to our Facebook and Instagram pages take you to those platforms, which have their own privacy policies.

11. Children

This website is not aimed at children, and we do not knowingly collect children's information through it. Information about children we support is handled as described in section 4.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.

13. Contact us and complaints

If you have a question or concern about how we handle personal information, please contact our Information Officer:

If you are not satisfied with our response, you may complain to the Information Regulator (South Africa):