Data Protection Policy

Last Updated: [Date]

Introduction

Collins Legacy Foundation is committed to processing personal data in accordance with applicable data protection laws and best practices. This policy sets out how we collect, store, use, and protect personal data.

Data We Collect

• Donor information (name, email, address, payment details via secure processors)
• Volunteer information (application details, background information)
• Beneficiary information (handled with strict confidentiality)
• Website usage data
• Newsletter subscriber information

Legal Basis for Processing

We process personal data on the following legal bases:

• **Consent**: Where you have given explicit consent
• **Contract**: To fulfill our obligations to donors and volunteers
• **Legitimate Interests**: For organizational management and communication
• **Legal Obligation**: Where required by law

Data Retention

• Donor records: 7 years (for financial compliance)
• Volunteer records: 3 years after last activity
• Newsletter subscribers: Until unsubscribed
• Beneficiary records: As required by program needs, with strict access controls

Data Security

We implement appropriate technical and organizational measures including:

• Encrypted data storage
• Access controls and authentication
• Regular security reviews
• Staff training on data protection

Your Rights

You have the right to: access your data, correct inaccuracies, request deletion, object to processing, and data portability.

Contact

Data Protection Officer

Collins Legacy Foundation

Mwanza, Tanzania

Email: [email]