Privacy policy

What personal information Skolo Saka collects, why we need it, who handles it for us, how long we keep it and what you can ask us to do with it.

Who we are

Skolo Saka is a nonprofit company (NPC), registration number 2026/740237/08, and a registered nonprofit organisation, NPO number 337-270-NPO. We are the responsible party for the personal information described here, under the Protection of Personal Information Act (POPIA).

What we collect and why

When you donate

The amount, whether it is once or monthly, and the school you chose (if any).
Without an account: your email address or cellphone number, and your name if you give it, so we can match the donation to you, send you to your receipt and let you lower or stop a monthly donation.
What Paystack confirms about the payment: its reference, receipt number, the fee, and a description of the card (such as its bank and last 4 digits). We never see or store your card number.

We use this to process your donation, keep accurate financial records and account for donations to SARS and our auditors.

If you agreed to Analytics on the cookie banner, we also tell Google Analytics that a donation was made once Paystack confirms it: the amount, the currency, whether it is once-off or monthly, and a random number for the donation, together with Google Analytics’ own cookie ID for your browser. Later monthly payments aren’t reported. Your name, email address, cellphone number, card details and payment reference are never sent to Google. If you also agreed to Ads measurement, Google Ads may count that donation as the result of one of our ads. We keep Google’s cookie ID with your donation only until that report is sent, for at most 72 hours.

When you create an account

Your email address and password (stored only in a scrambled, one-way form).
Your name and cellphone number, and anything you add to your profile, such as a title, a photo, “About me” or a yearbook message.
The schools you link to your account, and when you left them.
Messages and files you send in school chats.

We use this to run your account, show your donations in My donations and connect you with your school community.

When you contact us

Your name, email address, the message and the details you choose to give, such as your organisation, school, province or cellphone number. We use them to reply and to follow up on your enquiry. If you message us on WhatsApp, we use your number only to reply.

School sport

A learner’s sports profile (name, position, age and photo) is only shown publicly once a parent or guardian has given consent.

Keeping the site safe

Forms are checked by Cloudflare Turnstile to keep out automated abuse, and your IP address is used briefly to limit repeated requests.

Cookies and your browser

Signing in. When you sign in, a cookie keeps you signed in. Without it the account pages can’t work.
Forms in progress. While you fill in the donate, contact or sign-up forms, your choices are kept in this browser tab so they aren’t lost if you go back. They are cleared when you close the tab.
Site usage. To see which pages are used, the site keeps a random visitor ID in your browser and sends us the pages you view and the buttons you press. If you are signed in, this is linked to your account. If your browser sends “Do Not Track”, nothing is sent.
Google Analytics. Only if you agree on the cookie banner does Google Analytics set cookies to count visits and see how the site is used. Until you agree, we keep Google Analytics off. We also keep it off on the Paystack return page. The page addresses we send leave out payment references and other identifying query parameters.
Ads measurement. We advertise on Google Search. Only if you also agree to Ads measurement do we let Google Ads know that a visit or a donation followed one of our ads, using the click ID Google adds to the ad’s link and Google’s advertising cookies. We never switch on ad personalisation, so your visit isn’t used to build an advertising profile or to show you ads elsewhere.
Changing your mind. Open Help, Cookie settings at any time to switch either choice off. We then delete Google’s cookies from this browser and stop anything not yet sent to Google.

How long we keep it

Donation records are kept for 5 years after the end of the tax year of each donation, as South African tax law requires, then deleted.
Without an account: two years after your last donation ends, your email or cellphone number and name leave our live systems for an encrypted archive, which deletes them at the end of those 5 years.
Checkouts never paid: the personal details are removed after 30 days.
Accounts: your details stay until you delete your account. Deleting it stops any active monthly donation and removes your profile, photo and sign-in; payment records are still kept for the 5 years.
Enquiries, chat messages and site-usage records are kept while we need them. You can ask us to delete yours at any time.

The full donation details are in our Donation terms.

Your rights

Under POPIA you can ask us:

whether we hold information about you, and for a copy of it;
to correct information that is wrong or out of date;
to delete information we no longer need or are not allowed to keep;
to stop using your information, or object to how we use it.

If you have an account, you can correct most details yourself in your profile and delete the account in its settings. For anything else, email info@skolosaka.co.za. We may ask you to confirm who you are first.

If you’re not happy with how we handled your request, you can complain to the Information Regulator.

Contact us

For questions about this policy or your information, email info@skolosaka.co.za. We’ll update this page whenever how we handle personal information changes.