Privacy Policy

1. Introduction

Esther Enablement Services NPC ("EES", "we", "our", or "us") is committed to protecting the personal information of all individuals and entities with whom we engage, in compliance with the Protection of Personal Information Act, 4 of 2013 (POPIA). As a South African based non-profit company focused on supporting nonprofits, SMME's and corporate entities in South Africa, we collect and process personal information in the course of providing strategic and operational support. This policy explains how we collect, use, disclose, and protect personal information.

2. Scope

This policy applies to:

• Clients and prospective clients
• Partner organisations
• Contractors and service providers
• Employees and job applicants
• Website visitors

3. Information We Collect

We may collect the following categories of personal information, depending on the nature of the engagement:

• Identity Information: Full names, ID numbers, passport details.
• Contact Information: Email address, telephone numbers, postal and physical addresses.
• Professional Details: Employer, job title, professional background.
• Financial Information: Banking details, payment records (if relevant to a project).
• Special Personal Information (only when explicitly required and consented): e.g. race, health information, for employment or beneficiary reporting.

4. Purpose of Collection

We collect and process personal information for the following purposes:

• Providing consultancy and capacity-building services.
• Communicating with stakeholders.
• Recruitment and HR management.
• Monitoring and evaluating project outcomes.
• Fulfilling legal and contractual obligations.
• Compiling anonymous statistics for reporting and impact measurement.

5. Legal Grounds for Processing

We only process personal information when there is a lawful basis, which may include:

• Consent of the data subject.
• Performance of a contract.
• Legal obligation.
• Legitimate interest of EES or a third party (e.g., improving services).

6. Disclosure of Information

We may share personal information with:

• Our consultants, staff, and associates bound by confidentiality.
• Project funders or partners (only when required and anonymized where possible).
• Service providers (e.g. IT support, HR systems).
• Regulators or legal authorities (when required by law).

We will never sell your personal information.

7. Cross-Border Transfers

If we transfer personal data across South African borders (e.g., for cloud hosting or remote consultancy partners), we ensure that:

• The receiving party is subject to laws or agreements providing similar protection to POPIA.
• Data subjects have given explicit consent where applicable.

8. Data Subject Rights

In terms of POPIA, you have the right to:

• Access your personal data.
• Request correction, deletion, or destruction of your data.
• Object to or restrict processing.
• Withdraw consent (where consent is the legal basis).
• Lodge a complaint with the Information Regulator.

To exercise these rights, email us at: trish@eeservices.org.za

9. Data Retention

We retain personal information only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable laws and regulations. When no longer needed, data is securely deleted or anonymized.

10. Security Measures

We take reasonable, appropriate technical and organizational measures to prevent:

• Unauthorized access
• Loss or destruction
• Unlawful use or disclosure

These include secure file storage, password-protected systems, and role-based access to sensitive data.

11. Use of Website and Cookies

When you visit our website, we may use cookies and similar technologies to enhance user experience and collect non-identifiable data for analytics. You can adjust your browser settings to decline cookies.

12. Information Officer

In compliance with POPIA, EES has appointed an Information Officer:

13. Policy Availability

This Privacy Policy is:

• Published on our official website: www.eeservices.org.za
• Available on request at our offices or via email.

14. Updates to This Policy

This policy may be updated periodically to reflect legal changes or business practices. The latest version will always be available on our website.

15. Contact Us

If you have questions about this policy or wish to exercise your rights, please contact: