Privacy Policy

1. Information We Collect

We collect information you voluntarily provide to us, including:

• Contact forms: First name, last name, email address, and message content when you use our contact form.
• Donation forms: First name, last name, email address, donation amount, and any optional message you include.
• Newsletter subscriptions: Email address when you sign up to receive updates.
• Event registration: Name, email, and any other details you provide when registering for BEA events.

We do not collect payment card information directly. Payment processing is handled by secure third-party providers (Flutterwave or Stripe) who are PCI DSS compliant.

2. How We Use Your Information

We use the information we collect to:

• Respond to enquiries and messages you send us
• Process donations and send receipts
• Send newsletters and program updates (only if you have opted in)
• Coordinate event registration and participation
• Improve our website and programs
• Comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services to operate our website and programs:

• Formspree: Powers our contact and donation inquiry forms. Submissions are stored securely on Formspree servers. See Formspree's Privacy Policy.
• Sanity: Our content management system. Content is stored and served from Sanity's cloud infrastructure. See Sanity's Privacy Policy.
• Vercel: Hosts this website. Vercel may collect standard server logs including IP addresses and browser information. See Vercel's Privacy Policy.
• Google Fonts: We load typography via Google Fonts, which may log your IP address. See Google's Privacy Policy.

4. Cookies and Analytics

This website does not currently use tracking cookies or advertising cookies. We may use basic analytics tools to understand how visitors use our site (such as page views and general traffic patterns). These analytics do not collect personally identifiable information.

Your browser may store cookies from third-party services listed above. You can control cookie settings through your browser preferences.

5. Data Retention

We retain your personal information only as long as necessary to fulfil the purposes described in this policy, or as required by law. Contact form submissions are retained for 12 months. Donation records are retained for 7 years for financial and legal compliance.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications at any time
• Lodge a complaint with a data protection authority

To exercise any of these rights, contact us at contact@beyondepilepsyafrica.org.

7. Children's Privacy

Our website is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

9. Contact

If you have questions or concerns about this privacy policy or your personal data, contact us:

• Email: contact@beyondepilepsyafrica.org
• Website: beyondepilepsyafrica.org/contact
• Location: Kigali, Rwanda