Privacy Policy
How we look after your personal information, and the rights you have over it.
Last updated: 19 August 2026
Who we are
Jambo Africa Community Limited is a charity registered in England and Wales (charity No. 1117107) and a company limited by guarantee (company No. 16797523). Our registered office is Marlowe Innovation Centre, Marlowe Way, Ramsgate, CT12 6FA.
We are the data controller for the personal information described in this notice. That means we decide why and how it is used, and we are responsible for looking after it.
If you have any question about this notice, or want to exercise any of your rights, contact us at [email protected] or on 07737 190981.
What we collect, why, and how long we keep it
We only collect information you choose to give us, and information about how the site is used if you have agreed to analytics cookies. We do not buy personal data, and we do not sell or rent yours to anyone.
| When | What we collect | Our lawful basis | How long we keep it |
|---|---|---|---|
| Contact form enquiries | Your name, email address, chosen subject and the content of your message. | Legitimate interests — responding to someone who has asked us to get in touch. | Kept in our email account for up to 2 years after your enquiry is resolved, then deleted. |
| Donations | Your name, email address and, where you are a company, your organisation name. Card and bank details are entered directly with Stripe and never reach our servers. | Performance of a contract — processing the donation you have asked us to take. | Financial records are kept for 6 years after the end of the financial year they relate to, as charity and tax law requires. |
| Gift Aid declarations | Your home address and postcode, and your declaration that you are a UK taxpayer. | Legal obligation — HMRC requires us to hold these records to claim Gift Aid. | Kept for 6 years after the end of the tax year the claim relates to, in line with HMRC rules. |
| Website analytics | Pages visited, approximate location, device and browser type, and how you arrived at the site. Your IP address is anonymised. | Consent — collected only if you accept analytics cookies, and you can withdraw at any time. | Held by Google and Statcounter under their own retention settings, up to 26 months. |
| Spam protection | Technical information about your interaction with the contact form, collected by Google reCAPTCHA. | Legitimate interests — keeping our contact form usable and free of automated abuse. | Held by Google under their own retention policy. |
Our web host also keeps standard server logs, including IP addresses, for a short period to keep the site secure and working. These are deleted automatically.
Children and young people
Much of our work is with children and young people, but this website is not aimed at them and we do not knowingly collect personal information from anyone under 13 through it. Personal information gathered through our youth programmes is handled under our separate safeguarding and data protection procedures, not through this site. If you believe a child has given us information here, contact us and we will delete it.
Sending information outside the UK
Some of our suppliers process information outside the UK, principally in the European Economic Area and the United States. Where that happens, the transfer is protected either by UK adequacy regulations or by the International Data Transfer Addendum to the European Commission’s standard contractual clauses, so your information keeps essentially the same protection it has here.
Keeping information safe
This site is served over an encrypted connection. Card and bank details are entered directly into Stripe’s systems and are never seen or stored by us. Access to enquiries and donation records is limited to the trustees and staff who need it, and our suppliers are chosen for their own security standards.
No system is perfectly secure. If a breach ever puts your rights at risk, we will tell you and report it to the Information Commissioner’s Office within 72 hours, as the law requires.
Emails from us
We only send updates and appeals to people who have asked for them. Every such email carries an unsubscribe link, and you can also ask us to stop at any time by emailing [email protected]. We will still send you the messages we have to, such as a receipt for a donation or confirmation of a Direct Debit.
Your rights
Under the UK GDPR and the Data Protection Act 2018 you have the following rights. They are free to exercise, and we will respond within one month.
- Access. Ask for a copy of the personal information we hold about you.
- Rectification. Ask us to correct information that is wrong or incomplete.
- Erasure. Ask us to delete your information, where we have no ongoing legal reason to keep it.
- Restriction. Ask us to pause how we use your information while a concern is resolved.
- Objection. Object to processing we carry out on the basis of legitimate interests.
- Portability. Ask for information you gave us in a portable electronic format.
- Withdraw consent. Withdraw consent at any time, where consent is our basis for processing.
To exercise any of these, email [email protected]. We may ask you to confirm your identity first, so that we do not disclose your information to someone else.
Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.
Changes to this notice
We review this notice when our processing changes, and at least once a year. The date at the top shows when it was last updated. If we make a significant change, we will say so clearly on the site.