1.Who We Are
This website (purpleroseorphans.org) is operated by Purple Rose Orphans, a community-based organisation registered in Uganda, together with our partner association in Greece, registered as Σύλλογος Υποστέριξης Παιδιών της Μιτιάνα Ουγκάντα Πορφυρό Ρόδο (“Purple Rose Greece”).
For the purposes of European data protection law (the General Data Protection Regulation, or GDPR), Purple Rose Greece acts as data controller for personal data collected through this website from visitors in the European Union, and Purple Rose Orphans acts as controller for data relating to our work in Uganda.
2.What Information We Collect
We collect personal data that you provide directly to us, including:
- Contact details you submit through our contact form, donation form, sponsorship form, or volunteer application form, such as your name, email address, country, and WhatsApp number
- Payment and billing information when you make a donation or sponsor a child, processed securely by our payment providers (see Section 6)
- Any information you choose to share with us by email, WhatsApp, or social media
We also collect limited technical information automatically when you visit our website, such as your browser type, approximate location at country or city level, and pages visited, through cookies and similar technologies (see Section 5).
3.How We Use Your Information
We use your personal data to:
- Process and confirm donations and sponsorships
- Respond to your messages and enquiries
- Process and respond to volunteer applications, including arranging a video call as part of our screening process
- Send you updates about a child you sponsor, if you have agreed to sponsor a child
- Improve our website and understand how it is used
- Comply with legal and accounting obligations
We do not sell or rent your personal data to anyone.
4.Legal Basis for Processing
Where GDPR applies, we rely on the following legal bases: your consent, for example when you sign up to receive updates; the performance of a contract, for example processing a sponsorship payment; our legitimate interests, for example responding to enquiries or preventing fraud; and compliance with a legal obligation, for example accounting records.
5.Cookies
Our website may use cookies and similar technologies to remember your preferences, such as your selected currency, and to understand how visitors use the site. You can control or disable cookies through your browser settings. Disabling cookies may affect some features of the site.
6.Third-Party Services
We use the following third-party services to operate our website and process donations. Each provider processes data according to its own privacy policy:
- Stripe, via the GiveWP donation plugin — for card payments
- PayPal — for donation and sponsorship payments
- Mobile money services (Remitly, WorldRemit and similar) — for mobile money payments
- Our bank (for bank transfer donations to the Greek association’s account)
- WordPress — our website hosting and content management platform
- Google Maps — to show our location on the Contact page
- Instagram and Facebook — for embedded social media content and links
We only share the personal data necessary for these services to perform their function, for example your payment details with our payment processor.
7.International Data Transfers
Because Purple Rose Orphans operates in Uganda and our partner association is based in Greece, your personal data may be processed both within and outside the European Economic Area. Where we transfer personal data outside the EEA, we take reasonable steps to ensure it is protected to a standard consistent with GDPR, including relying on the data protection commitments of the third-party services listed in Section 6.
8.Data Retention
We keep personal data only for as long as necessary for the purposes described in this policy, or as required by law, for example financial records related to donations. Volunteer application data that does not result in a placement is deleted within 12 months unless you ask us to keep it for future opportunities.
9.Children’s Information
This website is intended for adult visitors, donors, sponsors and volunteers. We do not knowingly collect personal data directly from children through this website. Information, photographs and stories about the children in our care that appear on this site are handled separately, under strict consent and safeguarding rules set out in our Child Protection Policy, not through any data collected via website forms.
10.Your Rights Under GDPR
If GDPR applies to you, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Request deletion of your personal data, where applicable
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent at any time, where processing is based on consent
11.How to Exercise Your Rights
To exercise any of these rights, or if you have any questions about this policy, please contact us at purplerose.greece@gmail.com. We will respond within one month, as required by GDPR.
12.Complaints
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. For residents of Greece, this is the Hellenic Data Protection Authority (www.dpa.gr).
13.Changes to This Policy
We may update this policy from time to time. We encourage you to review it periodically.