Last Updated: 26 June 2026

This privacy notice for A4ID (Advocacy for Inclusive Development) (“we”, “us”, or “our”) explains how and why we may collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), such as when you:

• Visit our website at https://a4id.org.za/, or any site of ours that links to this privacy notice
• Engage with us in other related ways — including sales, marketing, or events

Questions or concerns? This policy is designed to help you understand your privacy rights and choices. If you do not agree with our practices, please do not use our Services. For any questions or concerns, contact us at hello@a4id.org.za

1. Introduction

We respect your privacy and comply with POPIA, GDPR, CCPA/CPRA, PIPEDA, and other applicable global data protection laws. This Policy explains what data we collect, why, how we use it, and your rights.

2. Information We Collect

• Contact data: name, email, phone
• Identifiers: IP addresses, browser/device info
• Transactional data: form submissions, purchase history
• Cookies & analytics data (see separate Cookie Policy section)
• Optional sensitive data: with explicit consent

3. How We Collect Data

• Directly from you (forms, emails, account sign-ups)
• Automatically via website tools and cookies
• From third parties—when authorized or permitted by you

4. Cookies & Tracking

We use essential, functional, statistical, and marketing cookies:

• Essential & functional cookies for site operation
• Analytics/statistics, which are anonymized and require consent
• Marketing/tracking cookies used only with consent
  You can manage preferences through our cookie banner or your browser.

5. Purpose & Legal Basis for Processing

Purpose	Legal Basis
Provide services & support	Contract necessity
Communicate (e.g., updates)	Consent / legitimate interest
Marketing (with opt-in)	User consent
Analytics & personalization	Consent / legitimate interest
Legal compliance	Legal obligation

5a. AI and Automated Processing

We use artificial intelligence (AI) and automation to support some of our tools and services. Where applicable:

• Your data may be processed by AI models (e.g., for generating summaries, leads, or reports).
• We do not train AI models on client data unless explicitly agreed upon.
• AI processing is done securely and typically in real-time. We do not retain data sent to external models unless stored for service delivery or compliance.
• We do not make legally binding decisions based solely on automated processing.

For more information, see our AI Use Policy

6. Data Sharing & Transfers

We may share your data with:

• Service providers (e.g., WP host, payment gateways, analytics tools)
• Third parties when required by law or for legitimate interest
• Overseas recipients, only where:
  • Countries ensure adequate protection, or
  • You’ve consented, or
  • It’s essential for contractual performance

Some of our services are powered by secure third-party platforms. These tools may temporarily process submitted data to deliver requested outputs. We choose partners with strong privacy and security practices, and no data is used for model training without permission.

7. Data Retention & Security

• We secure your information using technical and organizational measures (e.g., encryption, access controls, and regular security reviews).
  Personal data is retained:
  • Only for as long as necessary to fulfill the purpose it was collected for,
  • As required by law (e.g., tax or audit),
  • Or for a limited period (e.g., 12 months) if no specific purpose remains.

You may request deletion at any time, unless legal or contractual obligations prevent immediate erasure.

8. Your Rights

You have the following rights:

• Access, correction, deletion, restriction
• Withdraw consent, object to processing
• Data portability
• Object to automated decisions
• Opt out of marketing communications
• Lodge a complaint with supervisory authorities (e.g., SA Information Regulator, ICO, local DPA)

9. Breach Notification

In the event of a breach:

• We will notify affected individuals and authorities “without undue delay,” in line with POPIA, GDPR, CCPA timelines

10. Sensitive Data & Minors

• We only process explicit-sensitive data with explicit consent
• For minors, verifiable parental consent is required

11. Direct Marketing

All marketing communications are sent only with your active consent, and you can unsubscribe at any time

12. Accountability & Data Governance

We have a designated Information/Data Protection Officer, maintain data inventories, and conduct regular privacy audits and staff training

13. Policy Updates

We may update this Policy periodically. The updated version will take effect from the Effective Date listed above, and we’ll notify you of significant changes.

14. Contact Us

If you have questions, wish to exercise your rights, or want to withdraw consent:

A4ID (Advocacy for Inclusive Development)
Email: hello@a4id.org.za
Address: 6 Interlaken Avenue, Riviera Park, Mafikeng, 2745

Access to Information (PAIA)

As a private body in South Africa, A4ID (Advocacy for Inclusive Development) complies with the Promotion of Access to Information Act (PAIA). You may request access to records held by us by:

• Completing Form 02 available at: https://inforegulator.org.za/forms/
• Emailing the completed form to: hello@a4id.org.za

Access may be granted subject to fees and legal limitations outlined in PAIA.