Effective Date: 3 April, 2026

1. Introduction

CIPA (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website and interact with us.

2. Information We Collect

Information you provide directly

We collect personal information that you voluntarily provide, including:

• First name and last name

• Email address

• Any information included in your message

• Your selected area of interest

This information is collected when you:

• Submit a contact form

• Sign up to receive our newsletter

Information collected automatically

When you visit our website, we may automatically collect certain information, including:

• IP address

• Browser type and device information

• Pages visited and time spent on the website

This information is collected using cookies, analytics tools provided by Squarespace, and translation services such as Weglot

3. How We Use Your Information

We use your personal data to:

• Respond to your enquiries

• Communicate with you about your enquiry

• Send newsletters or updates (if you have subscribed), using our email service provider

• Improve our website and user experience

• Monitor website performance and usage

4. Legal Basis for Processing

If you are located in the UK or European Economic Area, we rely on the following legal bases:

• Consent – when you submit a form or sign up for communications

• Legitimate interests – to operate, maintain, and improve our website

• Legal obligations – where required by law

5. How We Share Your Information

We do not sell your personal data.

We may share your data with trusted service providers who support our website and communications, including:

Squarespace (website hosting, forms, and analytics)

GoDaddy (domain services)

Microsoft Outlook (email communication services)

Mailchimp (email marketing and newsletter distribution)

Weglot (website translation and localisation services)

These providers only process your data on our behalf and are required to protect it.These providers only process your data on our behalf and are required to protect it.

6. International Data Transfers

As we operate internationally, your personal data may be transferred to and processed in countries outside your country of residence, including the United States.

Some of our service providers (including Mailchimp and Weglot) are based outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data.

Where required, we ensure appropriate safeguards are in place to protect your data.

7. Cookies

We use cookies and similar technologies to ensure our website functions properly and to understand how visitors use our site.

Cookies are small text files placed on your device when you visit a website.

We use cookies to:

• Enable essential website functionality

• Analyse website traffic and usage

• Improve user experience

Our website is hosted on Squarespace, which may place cookies on your device as part of its services.

You can manage your cookie preferences through our cookie banner or through your browser settings. You may also delete cookies at any time.

Please note that disabling certain cookies may affect how the website functions.

Our email communications may include tracking technologies (such as pixels) to help us understand engagement with our emails.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Responding to enquiries

• Maintaining communication records

We may retain data longer where required by law or for legitimate administrative purposes.

9. Your Rights

Africa and other jurisdictions

If you are based in Africa, you may have rights under your local data protection laws, including the right to access, correct, or request deletion of your personal data. These rights may vary depending on the country in which you are located.

If you are located outside Africa and not in one of the regions listed below, you may have similar rights under the laws of your country.

We will respond to requests in accordance with applicable laws.

UK / EU (GDPR)

• Right to access your personal data

• Right to correct inaccurate data

• Right to request deletion

• Right to restrict or object to processing

• Right to data portability

• Right to withdraw consent

United States (including California)

• Right to know what personal data we collect

• Right to request deletion

• Right to correct inaccurate data

• Right to opt out of the sale or sharing of personal data

We do not sell your personal data.

To exercise your rights, please contact us using the details below.

10. Third-Party Links

Our website may contain links to third-party websites, including partner organisations and external platforms such as LinkedIn.

We do not control and are not responsible for the content, security, or privacy practices of these external websites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Security

We take reasonable technical and organisational measures to protect your personal data. However, no method of transmission over the internet is completely secure.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

13. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us:

CIPA (Children of Incarcerated Parents in Africa)
Email: info@cipa.africa