Privacy Policy

Last updated: 2 October 2026

The Initiative for Strategic Litigation in Africa (“ISLA”, “we”, “us” or “our”) respects your privacy. This policy explains how we collect, use, share and protect personal information when you visit www.the-isla.org, contact us, subscribe to communications, register for events or make a donation.

We process personal information in accordance with applicable South African law, including the Protection of Personal Information Act, 2013 (“POPIA”).

1. Information we collect

Depending on how you interact with us, we may collect:

• Your name, email address, telephone number and organisation.
• Information you provide through enquiries, registrations, subscriptions or other website forms.
• Donation details, including the amount, date, transaction reference and payment status.
• Records of your communications with us.
• Technical information, such as your IP address, browser, device information and website activity, collected through server logs, cookies or similar technologies.

Please provide only information relevant to your enquiry. Avoid submitting confidential case information or sensitive personal information through general website forms unless we have specifically requested it through an appropriate channel.

2. How we use your information

We use personal information to:

• Respond to enquiries and requests.
• Administer donations, issue acknowledgements and maintain financial records.
• Manage event registrations and communicate event information.
• Send newsletters or other updates where you have subscribed or another lawful basis applies.
• Maintain, secure and improve our website.
• Prevent fraud, investigate technical problems and protect our systems.
• Comply with legal, accounting and regulatory obligations.

We process information where permitted by law, including where you have consented, where processing is necessary to fulfil an agreement, to comply with a legal obligation, or to pursue a legitimate interest.

3. Donations and payment information

Online donation payments are processed through PayFast and the payment providers involved in your selected payment method.

Payment credentials should be entered through the payment provider’s secure interface. ISLA does not ask you to send your full card number, security code or banking password through email or website enquiry forms.

We may receive donor and transaction information needed to confirm your donation, maintain records and respond to payment enquiries.

PayFast processes personal information under its own privacy policy, available at:

https://payfast.io/privacy-policy/

4. Newsletters and communications

If you subscribe to our communications, we use your contact details to send the updates you requested.

You can unsubscribe using the link in our communications or by contacting info@the-isla.org. Unsubscribing from newsletters does not prevent us from sending necessary administrative messages about a donation, event registration or enquiry.

5. Cookies and similar technologies

Our website may use cookies and similar technologies to support website functions, remember preferences and understand website use.

Where optional analytics, embedded content or other non-essential technologies are used, we will provide relevant information and obtain consent where required.

You can manage cookies through your browser settings and any cookie preference controls provided on the website. Blocking certain cookies may affect website functionality.

Third-party content or services may process information under their own privacy policies.

6. Sharing personal information

We may share relevant personal information with service providers that support our website, hosting, communications, event administration, payment processing and financial administration.

We limit sharing to what is necessary for the relevant purpose and require appropriate safeguards where applicable.

We may also disclose information where required by law or where reasonably necessary to protect legal rights, investigate fraud or respond to a lawful request.

We do not sell personal information.

7. International processing

Some service providers may store or process information outside South Africa.

Where this occurs, we take reasonable steps to ensure that the transfer complies with POPIA, including through appropriate contractual protections, adequate protection in the receiving jurisdiction or another lawful basis.

8. Retention

We retain personal information for as long as reasonably necessary for the purpose for which it was collected, including applicable legal, accounting and recordkeeping requirements.

When information is no longer required, we will take appropriate steps to delete, destroy or de-identify it, subject to lawful retention obligations.

9. Security

We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, disclosure, alteration and destruction.

No website or electronic transmission can be guaranteed completely secure. If a security compromise occurs, we will respond and provide notifications where required by law.

10. Your rights

Subject to applicable law, you may request:

• Confirmation of whether we hold your personal information.
• Access to your personal information.
• Correction of inaccurate or incomplete information.
• Deletion of information where legally appropriate.
• Withdrawal of consent where processing relies on consent.
• Objection to certain processing activities.

Contact info@the-isla.org, marking your request “Privacy request”. We may need to verify your identity before responding.

You may also lodge a complaint with South Africa’s Information Regulator:

Website: https://inforegulator.org.za/
Email: enquiries@inforegulator.org.za
Telephone: 010 023 5200

11. Information you choose to provide

Providing information through our website is generally voluntary. However, we may be unable to respond to an enquiry, administer a registration or process a donation if necessary information is not provided.

Where a legal requirement applies to the collection of information, we will explain this as appropriate.

12. Changes to this policy

We may update this policy to reflect changes in our activities, website or legal obligations. The updated version will be published on this page with a revised date.

Where necessary, we will provide additional notice or obtain fresh consent.

13. Contact us

Initiative for Strategic Litigation in Africa
87 de Korte Street
South Point Corner, 7th Floor
Braamfontein, 2017
Gauteng, South Africa

Email: info@the-isla.org
Telephone: +27 11 338 9028