Privacy

1. Introduction

Dignity Restoration Action Foundation (DRAF) is a registered charity  committed to protecting the privacy of our stakeholders, including donors, beneficiaries, volunteers, and employees. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information. As an international charity organization registered and headquartered in Zambia, we adhere to privacy laws that vary depending on the jurisdiction in which we operate.

**2. Compliance with Jurisdictional Privacy Laws**

DRAF operates in multiple countries, and our privacy practices are aligned with the legal requirements of each jurisdiction. This means that the collection, processing, and storage of personal information will comply with the privacy laws of the country where DRAF is located.

- **Zambia:** As our headquarters is in Zambia, we comply with relevant Zambian laws, including the Electronic Communications and Transactions Act, 2009, the Constitution of Zambia, and the Cyber Security and Cyber Crimes Act, 2021.

- **International Operations:** In countries where DRAF has operations outside Zambia, we comply with the local privacy regulations of that country. For example, in the European Union, we adhere to the General Data Protection Regulation (GDPR) standards. Similarly, in other jurisdictions, we comply with applicable data protection laws.

**3. Information Collection and Use**

DRAF collects personal information from individuals for various purposes, including processing donations, communicating with stakeholders, and providing services. The types of information we collect may include:

- Contact details (e.g., name, address, email, phone number)

- Financial information (e.g., credit card details for processing donations)

- Demographic information (e.g., age, gender)

- Health information (where necessary and with explicit consent)

We collect and use this information only with your consent or as permitted by law and solely for the purposes stated at the time of collection.

**4. Disclosure of Personal Information**

Your personal information is not shared, rented, exchanged, or otherwise disclosed to any outside third party except where authorized or required by law and as detailed in this Privacy Policy.

DRAF may use third-party services and suppliers to assist in various functions such as financial and IT services, processing transactions, data storage, and analytics. These partners are bound by contracts that include confidentiality clauses and data protection obligations. If these services involve the transfer of your data to another jurisdiction, we ensure that the transfer complies with the privacy laws of that jurisdiction.

**5. Data Storage and Cross-Border Transfers**

DRAF may use cloud-based services to store or process your information. Depending on the location of these services, your information may be transmitted through or stored on servers in different countries, including the United States of America (USA). When your data is stored or processed in another jurisdiction, it is subject to the laws applicable in that jurisdiction, including potential access by government authorities under local laws.

**6. Internet Usage and Cookies**

We collect certain information automatically when you visit our website, such as your IP address, browser type, operating system, and the pages you visit. We may use cookies to improve your experience on our site and to gather analytics about site usage. You can disable cookies through your browser settings, but this may affect your ability to use certain features of our website.

**7. Protection of Children's Personal Information**

DRAF is committed to protecting the privacy of children. We collect contact information from children over the age of 12 who participate in DRAF programs, solely for identification purposes and to inform them of other opportunities. If the participant is under 18, parental or guardian consent is required.

**8. Security of Your Personal Information**

DRAF implements robust security measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. We regularly review and update our security practices to ensure the integrity of your data.

**9. Your Rights**

Depending on the jurisdiction where you are located, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict the use of your data. You may also have the right to object to the processing of your personal information or to withdraw your consent at any time. To exercise these rights, please contact us at the details provided below.

**10. Contact Information**

For questions or concerns regarding this Privacy Policy or how your information is handled, please contact us at info@draf.one

**11. Changes to this Privacy Policy**

DRAF reserves the right to update this Privacy Policy at any time to reflect changes in our practices or legal requirements. Any changes will be posted on our website, and where required by law, we will notify you of significant changes.