Legal & Transparency

Privacy Policy

How we collect, use, and protect your personal information

Last updated: 20 May 2026

Home Privacy Policy

Daybreak House for Vulnerable Babies is a Place of Safety operated as a project of the Grové Schoombee Foundation NPC. We are committed to protecting your privacy and handling personal information responsibly, in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).
01

Who We Are

The responsible party for your personal information is:

The Grové Schoombee Foundation NPC
NPC Registration: 2022/359139/08
PBO Number: 930076658
Pretoria, South Africa
Email: yolane@grovesfoundation.co.za

Daybreak House for Vulnerable Babies operates under the Foundation and does not hold independent legal status. All references to "we", "us", or "our" in this policy refer to the Foundation acting on behalf of Daybreak House.

02

What We Collect

We only collect information necessary for the purposes described below.

Donors

Data How it is collected
Name and email addressOnline donation form (Charitable Pro) or EFT reference
Payment informationProcessed by PayFast — we do not store card details
Donation amount and frequencyRecorded in Charitable Pro on our website database
Organisation name (if applicable)Provided voluntarily for corporate tax certificates

Volunteers

Data How it is collected
Full name, contact number, email addressVolunteer application form
South African ID numberApplication form — required for screening
Occupation and employer detailsApplication form
Emergency contact detailsApplication form
Health declaration (relevant conditions only)Indemnity form
Shift booking dates and timesVolunteer scheduling system (Amelia)
Physical address of Daybreak HouseReleased only after application approval

General website visitors

  • IP address and browser information (via server logs and cookies)
  • Pages visited and time spent on site (via analytics)
  • Name and email address if you submit our contact form
03

How We Use Your Data

We use your personal information only for legitimate purposes directly related to the work of Daybreak House and the Grové Schoombee Foundation. We will never sell, rent, or trade your information to third parties.

  • Processing donations and issuing Section 18A tax certificates where applicable
  • Managing volunteer applications — screening, approval, scheduling, and communication
  • Safeguarding — verifying the identity of volunteers who will have contact with babies in our care
  • Sending confirmations and updates relevant to your donation or volunteer booking
  • Responding to enquiries submitted via the contact form or email
  • Maintaining records required by law, our donors, and our governing body
  • Improving our website through anonymised analytics data
Our lawful basis: Processing is carried out with your consent (applications and donations), in fulfilment of our safeguarding obligations (volunteer screening), and for the legitimate interests of protecting the babies in our care.
04

Sharing Your Data

We share personal information with trusted third-party service providers only where necessary, and only to the extent required.

Donation management

Online donations are collected and recorded using Charitable Pro, a plugin installed on our WordPress website. Charitable stores donor names, email addresses, donation amounts, and frequency in our website database hosted with xneelo in South Africa. Charitable passes payment details directly to PayFast for processing and does not store card or banking credentials.

Payment processing

Online donations are processed by PayFast (Pty) Ltd. When you donate online, your payment details are entered directly on PayFast's secure platform. We do not receive or store your card or banking credentials. PayFast's own privacy policy governs how they handle your payment data.

Volunteer scheduling

Volunteer shift bookings are managed through Amelia, a scheduling platform hosted on our WordPress installation. Booking data is stored on our website servers hosted with xneelo in South Africa.

Email communications

We use our hosted email service (configured with xneelo) to send confirmations, approval notifications, and general communications. We do not use third-party bulk email marketing platforms.

Legal obligations

We may disclose personal information if required to do so by law, court order, or to protect the safety of the babies and staff in our care.

05

How Long We Keep Your Data

Category Retention period
Donor records (including Section 18A certificates)5 years from date of donation (SARS requirement)
Volunteer application and indemnity formsDuration of active volunteering, plus 3 years
Volunteer shift records3 years from last shift
Contact form enquiries12 months from date of submission
Website analytics data26 months (anonymised, aggregated)

When data is no longer required, it is securely deleted or anonymised.

06

Safeguarding & Children

Daybreak House is a registered Place of Safety caring for vulnerable babies. The protection of these children is our highest priority, and it directly shapes how we handle personal information.

We take the following measures to protect the children in our care:

  • The physical address of Daybreak House is not published anywhere on this website. It is released only to approved volunteers via a private confirmation after manual review and approval.
  • No images of babies or children in our care appear anywhere on our website, social media, or marketing materials.
  • All volunteers are screened before being granted access to the premises, requiring identity verification and a signed indemnity form.
  • Volunteer shift bookings are held at "Pending" status until our Volunteer Coordinator manually reviews and approves each applicant.
  • We do not collect personal data from children. Our website is not directed at persons under 18.
07

Cookies

Our website uses cookies — small text files stored on your device — to help the site function correctly and to understand how visitors use it.

Essential cookies

These are required for the website to operate. They include session cookies used by WordPress and cookies set during the donation checkout process. You cannot opt out of these without affecting site functionality.

Analytics cookies

We use anonymised analytics to understand which pages are most helpful and how visitors find us. This data is aggregated and does not identify individual users. You may opt out using your browser settings or a privacy extension.

Third-party cookies

PayFast may set cookies when you proceed to checkout. Our embedded Instagram feed (via Smash Balloon) may also set cookies from Instagram/Meta. These are governed by the respective providers' privacy policies. You can manage cookie preferences through your browser settings at any time.

08

Your Rights Under POPIA

The Protection of Personal Information Act 4 of 2013 (POPIA) gives you the following rights:

Right to access

You may request a copy of the personal information we hold about you.

Right to correction

You may ask us to correct or update inaccurate information.

Right to deletion

You may request deletion of your information, subject to legal retention obligations.

Right to object

You may object to processing of your information for marketing purposes.

Right to withdraw consent

Where processing is based on consent, you may withdraw it at any time.

Right to complain

You may lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, email yolane@grovesfoundation.co.za. We will respond within 10 business days.

Information Regulator (South Africa)
If you are not satisfied with our response, you may contact the Information Regulator at inforeg@justice.gov.za or visit www.justice.gov.za/inforeg
09

Security

We take reasonable technical and organisational measures to protect your personal information, including:

  • SSL encryption on all pages of this website (https)
  • Hosting on South African servers (xneelo) with access controls
  • Email authentication protocols (SPF, DKIM, DMARC) to prevent spoofing
  • Limited staff access to personal data on a need-to-know basis
  • Payment processing exclusively through PCI-DSS compliant PayFast

In the event of a data breach that may affect your rights, we will notify you and the Information Regulator as required by POPIA.

10

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "Last updated" date at the top of this page.

We encourage you to review this page periodically. Continued use of our website after changes are posted constitutes acceptance of the revised policy.

11

Contact Us

If you have any questions or requests regarding this Privacy Policy, please contact us:

Daybreak House for Vulnerable Babies
c/o The Grové Schoombee Foundation NPC
Email: yolane@grovesfoundation.co.za
We will acknowledge within 3 business days and respond fully within 10 business days.

Have a question about your data?

We are happy to help. Reach out and we will respond within 10 business days.

Email Us

Subscribe To Our Newsletter

Sign up to stay close to everything happening at Daybreak House. From the small milestones worth celebrating to the ways your kindness is felt every day, we will keep you close to the story as it unfolds.