Policies
Privacy policy
Last updated: October 2026
Draft policy. ZuAfrique Foundation is being established. This policy will be reviewed by a legal adviser and formally adopted by our trustees as part of registration.
Who we are
ZuAfrique Foundation (“we”, “us”) is the data controller for personal data collected through this website. Contact us about data protection at info@ayahq.com. We will register with the Information Commissioner’s Office (ICO) and publish our registration number here.
What we collect
- Donors: name, email, amount, frequency and currency. If you add Gift Aid: your home address and postcode, and the date of your declaration. Card and bank details are handled by our payment provider, Stripe, and we never see or store them.
- Enquiries and applications: the details you give us in our forms.
- Newsletter subscribers: your email address and the date you consented.
- Website visitors: we don’t currently use analytics. If we add it, we’ll only collect anonymous usage statistics, and only with your consent. See our cookie policy.
Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Processing your donation and sending a receipt | Contract |
| Claiming Gift Aid and keeping records HMRC requires | Legal obligation |
| Replying to your enquiry | Legitimate interests |
| Sending you email updates | Consent (you can withdraw it at any time) |
| Understanding how our website is used | Consent |
| Safeguarding and preventing fraud | Legal obligation / legitimate interests |
We never sell or swap your data. We do not carry out wealth screening.
How long we keep it
We keep Gift Aid declarations and donation records for at least six years after the last donation they cover, as HMRC requires. We keep other personal data only as long as we need it for the purpose it was collected, and review what we hold every year.
Who we share it with
We share data only with service providers acting on our instructions: Stripe (payments), Netlify (website hosting, forms and form notifications) and GitHub (where the website’s content is stored, which contains no personal data from forms). If we launch an email newsletter or add analytics, we will name those providers here. Some providers may process data outside the UK, under appropriate safeguards.
Your rights
You can ask to see, correct or delete your data, object to or restrict how we use it, or ask us to move it. Email info@ayahq.com. If you are unhappy with our response, you can complain to the Information Commissioner’s Office at ico.org.uk.