Last updated: 20 April 2026
This Privacy Policy explains how personal information is collected, used, stored, disclosed, and protected when you visit or use www.theogrimbeek.co.za, including when you contact us, make a donation, place an order through the fundraising store, subscribe to updates, or otherwise interact with the website.
We are committed to processing personal information lawfully and in a reasonable manner consistent with applicable South African law.
1. Who We Are
This website is operated for the Theo Grimbeek fundraising initiative.
Website: www.theogrimbeek.co.za
Legal Owner / Responsible Party: Theo Grimbeek
Information Officer: Annalize Grimbeek
Email: donations@theogrimbeek.co.za
Phone / WhatsApp: +27 71 109 8467
2. Scope of This Policy
This Privacy Policy applies to personal information collected through the website, contact forms or enquiry forms, online donation forms, the fundraising online shop, newsletter or update sign-ups, social media or messaging contact initiated through the website, and any related communications arising from your use of the website.
3. Personal Information We May Collect
Depending on how you use the website, we may collect and process your name and surname, email address, phone number, billing and delivery address, donation details, order details, payment-related information necessary to process a transaction, records of correspondence or support queries, information you provide in forms, messages, comments, or testimonials, technical information such as IP address, browser type, device type, operating system, referral source, pages visited, and usage activity, cookie and analytics information, and any other information you voluntarily provide to us.
Where the website offers the option to leave a donor name, message, tribute, or note of support, we may also process that content in accordance with your selections.
4. Special or Sensitive Information
This website supports a medical fundraising initiative. Please do not submit unnecessary sensitive personal information about yourself or any other person through the website.
If you choose to submit any sensitive information voluntarily, including in a contact message or donation note, you confirm that you are authorised to do so and that you understand such information may be processed only for the purpose for which it was submitted.
5. How We Collect Information
We may collect personal information directly from you when you complete a form, place an order, make a donation, or contact us; automatically through cookies, analytics tools, pixels, server logs, and similar technologies; from payment or donation service providers when a transaction is processed; from courier or fulfilment partners for delivery purposes; from social media platforms or messaging services where you engage with us through those channels; and from third-party platforms you choose to use when supporting the campaign.
6. Why We Process Personal Information
We may process personal information to respond to enquiries and communications, process donations and issue confirmations or receipts, process and fulfil online shop orders, arrange delivery and communicate about shipping, administer the fundraising initiative, maintain donor and supporter records, improve the functionality, performance, and security of the website, detect, prevent, and investigate fraud, abuse, or unauthorised activity, comply with legal, tax, accounting, audit, and regulatory obligations, send campaign updates, fundraising news, or marketing communications where permitted, and protect our legitimate interests, the interests of supporters, or the integrity of the website and initiative.
7. Donations, Orders, and Payment Information
If you make a donation or place an order through the website, your transaction may be processed through third-party payment gateway providers, including YOCO and PayFast. We may receive transaction confirmations and limited payment-related data needed to administer the transaction.
We do not intend to store full payment card details on our own website systems where payments are handled by third-party gateways such as YOCO and PayFast. Those providers may process personal and transaction information in accordance with their own privacy policies, terms, and security procedures.
8. Public Donor Names, Testimonials, or Messages
Where the website includes a feature allowing donor names, support messages, testimonials, or similar content to appear publicly, this will only occur if you choose to provide content for that purpose or consent to that display. You should avoid including unnecessary personal or sensitive information in public messages. We reserve the right to moderate, edit, refuse, or remove public content that is inappropriate, unlawful, misleading, harmful, or privacy-invasive.
9. Direct Marketing and Updates
We may send fundraising updates, campaign communications, newsletters, or marketing messages by email, SMS, WhatsApp, or similar channels where permitted by law.
You may opt out of direct marketing communications at any time by clicking the unsubscribe link in the message, where available, replying with an opt-out request, contacting us using the details in this policy, or objecting to the processing of your personal information for direct marketing purposes.
10. Cookies and Similar Technologies
The website may use cookies, pixels, tags, scripts, and similar technologies to keep the website functioning properly, remember user preferences, support shopping cart and checkout functions, understand website traffic and user behaviour, improve performance and content, measure the effectiveness of campaigns or fundraising efforts, and support security and fraud-prevention measures.
Cookies may be set by us or by third-party services integrated into the website, such as analytics providers, payment gateways, social media platforms, embedded content, advertising tools, or website plugins.
You can usually control cookies through your browser settings. Disabling some cookies may affect the functionality of the website.
11. How We Share Personal Information
We may share personal information, where necessary, with website hosting providers, website developers, administrators, or technical support providers, e-commerce, checkout, and donation platform providers, payment gateways and payment processors including YOCO and PayFast, courier, fulfilment, or delivery providers, email, CRM, newsletter, SMS, or WhatsApp communication platforms, analytics, reporting, and performance tools, legal, accounting, tax, audit, or compliance advisers, law enforcement or regulators where legally required, and service providers who process information on our behalf under appropriate confidentiality and security obligations.
We do not sell personal information.
12. International Transfers
Some website, hosting, payment, analytics, email, cloud-storage, or plugin providers may store or process personal information outside South Africa.
Where cross-border transfers occur, we will take reasonable steps to ensure that such transfers are lawful and that the information receives an adequate level of protection or is otherwise transferred on a recognised legal basis.
13. Retention of Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, recordkeeping and reporting for the fundraising initiative, fulfilling donations, orders, and customer service obligations, compliance with legal, tax, and accounting obligations, resolving disputes, and enforcing our rights and policies.
When personal information is no longer required, we will take reasonable steps to delete, destroy, de-identify, or anonymise it, subject to any lawful retention requirement.
14. Security
We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, alteration, or destruction.
However, no website, platform, server, or transmission method is completely secure. You provide personal information at your own risk to the extent permitted by law.
15. Your Rights
Subject to applicable law, you may have the right to be notified that personal information is being collected, ask whether we hold personal information about you, request access to your personal information, request correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or unlawfully obtained, request deletion of records we are no longer authorised to retain, object on reasonable grounds to certain processing of your personal information, object to direct marketing, withdraw consent where processing is based on consent, subject to lawful limits, lodge a complaint with the Information Regulator, and institute civil proceedings where permitted by law.
16. How to Exercise Your Rights
To exercise any privacy right, please contact us using the contact details listed in this policy.
To help us process your request, please include your full name, contact details, enough information to identify you and your interaction with the website, and a clear description of the request. We may ask for proof of identity before actioning certain requests.
17. Complaints
If you believe your personal information has been processed unlawfully or your privacy rights have been infringed, please contact us first so that we can try to resolve the matter.
You may also lodge a complaint with the South African Information Regulator.
18. Third-Party Links and Platforms
The website may contain links to third-party websites, donation platforms, payment gateways, social media pages, campaign pages, or other services.
We are not responsible for the privacy, content, or security practices of third-party websites or services. Once you leave this website or interact directly with a third-party platform, that provider’s own privacy policy and terms will apply.
19. Children’s Privacy
This website is not intended to collect personal information directly from children without appropriate involvement of a parent, guardian, or authorised adult.
If you believe that personal information relating to a child has been submitted to us unlawfully or without proper authority, please contact us so that we can investigate and take appropriate action.
20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Any updated version will be published on this page with a revised “Last updated” date. Continued use of the website after a change is posted will be treated as acceptance of the updated policy to the extent permitted by law.
21. Contact Us
If you have any questions about this Privacy Policy or how personal information is handled, please contact:
Legal Owner / Responsible Party: Theo Grimbeek
Information Officer: Annalize Grimbeek
Email: donations@theogrimbeek.co.za
Phone / WhatsApp: +27 71 109 8467
Website: www.theogrimbeek.co.za