Skip to main content
CAPPTogo

Data Protection

The privacy policy covers this website. This one covers the association as a whole: the data of the people we work with, of our volunteers and of our donors.

Last updated: 19 September 2026

  1. 1. Our principles

    We collect something only if it serves a particular piece of work, we do not keep it beyond its usefulness, and we do not share it because sharing would be convenient. A list of children, families or beneficiaries is not communication material: it does not leave the association.

  2. 2. Data about the people we work with

    To organise a distribution we note what it takes to hold one: a name, a village, a school, a number of children. None of it is published, or passed to a partner or a funder in any form that identifies a child. An activity report carries numbers, not identities.

  3. 3. Who has access

    Only the team members who need it for their role. Access to the site and to the association's files is personal, each person has their own, and access is withdrawn when someone no longer holds the responsibility that justified it.

  4. 4. Keeping and deleting

    Data tied to an activity is kept for as long as the activity and its report require, then deleted, unless an accounting obligation means keeping it longer. Anyone may ask for information about them to be deleted; we do it, and we confirm that it is done.

  5. 5. If something goes wrong

    If data escapes us — a lost file, access obtained by someone else — we first limit the damage, then tell the people affected and the competent authority where the incident puts them at risk. We say so, even when it is awkward for us.

A question about this policy?

Write to us: we answer donors, volunteers, families and partners. A policy nobody can question is not worth much.