Privacy Policy

1. Introduction

The Erskine Arthur Foundation ("Foundation", "we", "us", "our", or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise process information about you in connection with our website and services.

2. Information We Collect

Information You Provide

We collect information you directly provide, including:

• Contact information (name, email, phone number, address)
• Donation information (amount, frequency, program preferences, payment method)
• Volunteer information (skills, availability, experience, interests)
• Account information (username, password - encrypted)
• Communication preferences and messages

Automatically Collected Information

We automatically collect certain information about your device and usage:

• Device information (browser type, operating system, device identifiers)
• Usage data (pages visited, time spent, click patterns)
• IP address and location information (city/region level only)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use collected information for:

• Processing donations and managing recurring contributions
• Volunteer management and opportunity matching
• Sending transactional emails (receipts, confirmations, updates)
• Improving our website and services
• Compliance with legal obligations
• Preventing fraud and maintaining security
• Analyzing trends and conducting research

4. Data Security

We implement comprehensive security measures to protect your data:

• SSL/TLS encryption for all data in transit
• Encrypted storage for sensitive information
• Access controls and authentication mechanisms
• Regular security audits and penetration testing
• Secure password hashing with industry-standard algorithms
• Rate limiting to prevent brute force attacks
• Audit logging for all sensitive operations

5. Data Retention

We retain your information for as long as necessary to:

• Provide our services
• Comply with legal obligations (typically 7 years for financial records)
• Resolve disputes and enforce agreements
• Detect and prevent fraud

You may request deletion of your personal data at any time, except where retention is required by law or for legitimate business purposes.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (right to be forgotten)
• Restrict processing of your data
• Receive your data in a portable format
• Withdraw consent to marketing communications
• Lodge a complaint with the relevant data protection authority

7. Third-Party Services

We use trusted third-party service providers for:

• Payment processing (payment gateways - PCI compliant)
• Email delivery (Sendgrid)
• Cloud hosting and data storage
• Analytics and monitoring

All third-party providers are contractually obligated to protect your data and comply with applicable privacy laws.

8. Cookies and Tracking

We use cookies for:

• Session management and authentication
• Remembering user preferences
• Analytics and performance monitoring
• Security and fraud prevention

You can control cookies through your browser settings. Disabling cookies may affect website functionality.

9. Children's Privacy

Our website is not intended for children under 13. We do not knowingly collect information from children. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information immediately.

10. International Data Transfers

If you access our website from outside Ghana, your information may be transferred to, stored in, and processed in Ghana and other countries. By using our website, you consent to such transfers.

11. Policy Updates

We may update this Privacy Policy periodically. We will notify you of material changes by updating the "Last Updated" date and, where required, by obtaining your consent. Your continued use of the website following notification constitutes acceptance of changes.

12. Contact Us

For privacy concerns, data access requests, or to exercise your rights, contact: