Legal Notice   

Welcome to Undugu. This notice outlines how we collect, use, and protect your personal information on our website, www.undugu.org.uk.
1. Data Collection and Use
Undugu is committed to transparency regarding your privacy. We collect personal information, such as your name, email address, and other relevant details, primarily for the following purposes:
* Communication: To respond to your inquiries, provide updates on our work, and share information relevant to our mission.
* Engagement: To facilitate your participation in our programs, events, or volunteer activities.
* Support: To process donations, acknowledge contributions, and maintain a record of our supporters.
* Website Improvement: To understand how our website is used, enabling us to enhance user experience and content relevance.
Crucially, any personal data collected through this website will be used exclusively for Undugu’s legitimate activities and purposes. We are committed to ensuring that your information is not used for any other reason, nor will it be shared, sold, or rented to third parties for their independent use without your explicit consent, except as outlined below.
2. Third-Party Technologies and Data Processing
Our website utilizes third-party tracking technologies (such as cookies and pixels) to help us improve our services and understand website traffic. These technologies may collect data, including your IP address. We also use third-party tools, like Google Ireland Limited for website translation and analytics, which may process data for their specified purposes (e.g., providing fonts, analytics).
The legal basis for processing this personal data is primarily Article 6(1) of the General Data Protection Regulation (GDPR), which allows processing for legitimate interests, with your consent, or for fulfilling contractual obligations.
3. Data Storage and International Transfers
Your data is primarily processed within the European Union. However, please be aware that data may be transferred globally to recipients such as Alphabet Inc., Google LLC, and Google Ireland Limited, in accordance with applicable data protection laws and appropriate safeguards.
4. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once no longer needed, your data will be securely deleted.
5. Your Rights
Under GDPR, you have several rights regarding your personal data, including:
* The right to access your data.
* The right to request correction of inaccurate data.
* The right to request deletion of your data.
* The right to object to the processing of your data.
* The right to withdraw consent at any time.
6. Consent and Opt-Out
By using our website, you agree to the use of tracking technologies as described. You have the right to revoke or change your consent at any time. You can also review the privacy and cookie policies of our third-party data processors and opt-out from their tracking across all domains where applicable.
7. Contact Us
If you have any questions about this legal notice or our data practices, please contact us through the provided channels on our website.
Thoughts on Data Collection for Undugu:
* Necessity for Mission: For an organization like Undugu (which suggests a focus on brotherhood, solidarity, or community development), collecting names and emails is essential for building a community of supporters, volunteers, and beneficiaries. It allows for direct communication regarding programs, impact stories, and ways to get involved.
* Relationship Management: It enables the organization to acknowledge donations, send thank-you notes, provide receipts, and keep supporters informed about how their contributions are making a difference.
* Personalized Engagement: Knowing a user's name allows for more personalized communication, fostering a stronger connection with the organization's mission. Email is the primary channel for newsletters, event invitations, and targeted appeals.
* Operational Efficiency: For managing events, volunteer sign-ups, or specific campaigns, collecting personal information is often a prerequisite for practical organization and logistical planning.
* Transparency and Trust: Clearly stating why data is collected and how it will be used builds trust with your audience. Emphasizing that the data is only for Undugu's use reinforces your commitment to privacy and ethical data handling.
Emphasizing "For Undugu Only"
To ensure your legal notice clearly communicates that data will be used "for Undugu only and not any other reason," you should:
* State it explicitly: As drafted above, include a clear statement that the data is exclusively for Undugu's legitimate activities and purposes.
* Define "Undugu's purposes": Briefly outline what those purposes are (e.g., communication, engagement, support).
* Address third-party sharing: While you use third-party services (like Google for analytics), clarify that these are for Undugu's benefit (e.g., website improvement, translation) and that your organization does not sell or rent personal data to these third parties for their independent marketing or other uses. The draft addresses this by stating "nor will it be shared, sold, or rented to third parties for their independent use without your explicit consent, except as outlined below."
This comprehensive approach should help you create a robust legal notice that aligns with your values and complies with data protection principles.