Privacy Policy

Last updated: 23 December 2025

This Privacy Policy explains how Zimkhitha (“we”, “us”, “our”) collects, uses and protects your personal information when you use our website or contact us. By using this website, you agree to the terms of this Privacy Policy.

1. Information we collect

We collect information that you provide to us directly, such as your name, email address, telephone number, general location details (such as suburb, city and province) and any message you send through our contact, programme or funding forms. Where relevant, we may also collect limited programme-related information you choose to provide (for example, number of family members participating and ages).

We also collect certain information automatically when you use our website, such as your IP address, browser type, device information and pages visited. This technical data helps us to secure and improve the website.

2. How we use your information

We use your information to respond to enquiries, assist with programme registration, manage referrals, provide support, and communicate with you about your request. We also use it to keep necessary records and improve our services and website. Where you have given consent, we may contact you with updates relevant to your enquiry, and you can withdraw this consent at any time.

3. Legal basis and compliance

We process personal information only where it is lawful to do so, including under the Protection of Personal Information Act (POPIA). This may be because we need to respond to your request, provide a service, because we have a legitimate interest in operating and protecting our programme and website, because you have given consent, or because the law requires us to keep certain records.

4. Data protection and security

We take reasonable technical and organisational measures to protect your personal information against loss, misuse, unauthorised access, disclosure or destruction. Access to your information is limited to people who need it for legitimate purposes and who are required to keep it confidential. No system can be guaranteed 100% secure, but we work to keep your information safe.

5. Cookies and analytics

Our website may use cookies and similar technologies to help it function correctly, remember certain preferences and gather simple usage statistics. You can change your browser settings to block or delete cookies, but some parts of the website may not work correctly if cookies are disabled. For more detail, please see our Cookie Policy.

6. Sharing of information

We do not sell or rent your personal information. We may share your information with trusted third parties who help us operate the website and provide services, such as IT and hosting providers or communications tools. We may also share information where we are required to do so by law, or where it is necessary to protect our rights, property or safety, or that of others. These third parties are expected to protect your information and use it only for the purposes for which it was shared.

7. International transfers

Some of our service providers or their systems may be located outside South Africa. Where personal information is transferred across borders, we take reasonable steps to ensure that it is protected to a standard that is comparable to the protection required under POPIA and other applicable laws.

8. Data retention

We keep personal information only for as long as it is needed for the purposes described in this Privacy Policy or as required by law, regulation or legitimate operational needs. After this, information is securely deleted or anonymised where practical.

9. Your rights

Subject to POPIA and other applicable laws, you may have the right to access the personal information we hold about you, request corrections to inaccurate or incomplete data, object to certain types of processing, withdraw consent where processing is based on consent and opt out of direct marketing (if applicable). To exercise these rights, please contact us using the details below.

10. Third-party websites

Our website may contain links to websites that are not operated by Zimkhitha. We are not responsible for the content or privacy practices of those third-party sites and recommend that you read their privacy policies before providing any personal information.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, our practices or the law. Any changes will be posted on this page with an updated “Last updated” date. Your continued use of the website after any changes are posted will be treated as acceptance of those changes.

12. Contact us

If you have any questions, requests or concerns about this Privacy Policy or how we handle your personal information, please contact us using the contact details provided on our Contact page.