Privacy Policy

Effective date: 1/6/25

1. Introduction

We at The Perivoli Foundation (“we”, “us”, “our”) are committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, store and share personal information when you visit our website at https://perivolifoundation.com/ (the “Website”), use our contact form, view our YouTube videos, or interact with us in other ways.

By using the Website or engaging with us, you agree to the practices described in this Policy.

2. Who we are

The Perivoli Foundation is a UK registered charity (Charity number 1189201).

Our registered office is [insert registered address].
We operate programmes in the UK and in multiple African countries.

3. What personal data we collect

We may collect and process the following personal data:

3.1 Contact Form
When you complete our contact/enquiry form, we typically collect:

  • your name
  • your email address
  • any other information you include (e.g., message content)

This allows us to respond to your enquiry and maintain records of correspondence.

3.2 YouTube & Videos
We publish videos on our YouTube channel. When you view or engage with our videos, YouTube may collect data according to its own privacy policy (e.g., viewing history, device information). We do not control the data YouTube collects. If you comment or submit information via YouTube, that is subject to YouTube’s terms. We may embed YouTube videos on our Website, which may set cookies or track viewing behaviour.

3.3 Google Analytics
We use Google Analytics to understand how users use our Website. This may involve collection of:

  • Device and browser information (e.g., OS, screen resolution)
  • IP address (possibly anonymised)
  • Referrer URL, pages visited, time on site, click paths

We do not use this data to identify you personally unless you explicitly provide personal details in another part of the site.

3.4 Additional data
In some cases, ie application forms, we may collect additional personal data, such as address, date of birth, bank details (for donations) or location. Those will be covered by separate consent or processes (and will be accompanied by a relevant privacy notice).

4. Why we process your personal data (purpose & lawful basis)

We process personal data for the following reasons:

  • To respond to enquiries you make via our contact form (legitimate interest / contract)
  • To provide you with information about our programmes, events and activities (consent or legitimate interest)
  • To analyse how visitors use our Website for improvement of the user experience (legitimate interest)
  • To comply with our legal obligations (e.g., charity regulation, tax, audits)
  • To manage our relationship with donors, volunteers and partners (performance of contract / legitimate interest)
  • If we rely on your consent (e.g., for newsletters), you will be given the option to withdraw that consent at any time.

5. Cookies and tracking technologies

Our Website uses cookies and similar technologies. Specifically:

  • We may use first-party and third-party cookies for functionality, analytics (Google Analytics) and embedded content (YouTube).
  • Google Analytics cookies allow us to gather aggregated usage data, such as the number of visitors, pages visited, time spent, and bounce rate. They anonymise IP addresses (e.g., via “_anonymizeIp” in Google Analytics) to reduce identification risk.
  • YouTube embedded videos may set cookies via Google/YouTube domains; viewing such content may trigger tracking by those providers under their privacy policies.

You can manage your cookie preferences via your browser settings; however, disabling cookies might affect your user experience on the Website.

6. Sharing and disclosure of personal data

We will not sell your personal data. We may share personal data:

  • With service providers who support us (e.g., email service, CRM, analytics provider) under contract and ensuring appropriate safeguards.
  • With regulatory bodies, auditors or charity regulators, where required by law or as part of our charitable reporting.
  • Within our group or partner organisations, where necessary for programme delivery,  or communication, and where appropriate safeguards are in place.
  • For transfers outside the UK (including to our African branches), we will ensure appropriate safeguards (e.g., standard contractual clauses, data-transfer agreements) to comply with UK GDPR and other applicable data-protection laws.

7. International & cross-border transfers

Because we operate in Africa, personal data may be transferred to, or accessed from, other jurisdictions (e.g., branch offices in Africa). Where data is transferred outside the UK or the EEA, we will ensure that there is an adequate level of protection, using means such as EU/UK Standard Contractual Clauses, binding corporate rules or equivalent legal mechanisms.

8. Data retention

We will retain your personal data only for as long as is necessary for the purposes for which it was collected, including compliance with legal obligations (for example, donor records). After this period, your data will be securely deleted or anonymised. We review our retention periods for each category of data on a periodic basis.

9. Your rights

Under UK GDPR and the Data Protection Act 2018 you have rights including:

  • The right to access the personal data we hold about you (right of access)
  • The right to request correction of inaccurate data (right to rectification)
  • The right to request deletion or restriction of processing of your data (right to erasure / right to restrict)
  • The right to object to certain types of processing (e.g., direct marketing)
  • The right to data portability (in certain circumstances)
  • The right to withdraw consent at any time (for processing based on consent)
  • The right to lodge a complaint with the Information Commissioner’s Office (ICO) or other relevant data-protection authority if you believe our processing is unlawful.
  • To exercise your rights, please contact us at the details in Section 12.

10. Security

We take appropriate technical and organisational measures to safeguard your personal data against unauthorised access, accidental loss, destruction or damage. These include encryption, access control, user authentication, network segmentation, regular testing and staff training. However, no system is completely secure; if you believe your data has been compromised, please contact us immediately.

11. Links to other websites

Our Website may contain links to external websites (including our YouTube channel or third-party partner sites). This Privacy Policy does not apply to those external sites. We encourage you to read the privacy policies of any external websites you visit.

12. Contact us

If you have any questions about this Privacy Policy or our data-processing practices, or you wish to exercise your rights, please contact:
The Perivoli Foundation
Email: info@perivolifoundation.com
Address: Third Floor, 20 Old Bailey, London, EC4M 7AN
Telephone: 0207 5976427

13. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time (for example, to reflect organisational, legal or technological changes). We will notify you by posting the updated version on the Website with the new effective date.