Last Updated: 1st Dec 2025
This Privacy Policy (“Policy”) describes how Forward Impact, a global social-impact consultancy operating across India and Africa (“Forward Impact”, “we”, “us”, or “our”), collects, uses, stores, discloses, and protects personal information.
By accessing our website or providing any personal information to us, you agree to be bound by this Policy. If you do not agree, you must immediately discontinue use of our website and services.
1. Definitions
For the purpose of this Policy:
· “Personal Information” means any information that identifies or could reasonably identify an individual.
· “Processing” means any operation performed on personal information including collection, recording, storing, modifying, transmitting, or deleting.
· “Applicable Laws” includes but is not limited to:
o India: Information Technology Act, 2000 and SPDI Rules
o South Africa: POPIA
o Kenya: Data Protection Act, 2019
o Nigeria: NDPR
o Any other privacy or data protection laws in jurisdictions where Forward Impact operates.
These definitions override any conflicting interpretation under local laws unless expressly required otherwise.
2. Information We Collect
We may collect the following categories of information:
2.1 Information You Provide
· Full name, email address, phone number, physical address
· Demographic data
· Payment or donation details
· Professional and organisational details
· Information submitted through forms, applications, hiring enquiries, or communication channels
2.2 Automatically Collected Information
· IP address, device identifiers, browser type
· Operating system, usage data, clickstream patterns
· Cookies, tracking pixels, log files, analytics tools
2.3 Sensitive Personal Information
Where required for donor onboarding, hiring, or verification (and only with explicit consent):
· Government-issued IDs
· Banking/transactional information
· Any information classified as “sensitive” under India/POPIA/NDPR/Kenya DPA
We do not collect unnecessary, excessive, or unlawful sensitive information.
3. Lawful Basis for Processing
We process information under one or more of the following legal bases:
· Consent
· Performance of a contract
· Compliance with legal obligations
· Legitimate interest (e.g., fraud prevention, user experience improvement, donor verification)
· Public interest (in limited circumstances)
You may withdraw consent at any time, but this will not affect prior lawful processing.
4. Use of Information
We may use your information for:
· Operating, managing, and improving our website and services
· Processing donations, payments, and service requests
· Responding to queries, communication, and customer support
· Verifying identity where required
· Maintaining internal records and compliance reports
· Conducting research and analytics
· Sending marketing communication only if legally permitted
· Preventing fraud, ensuring cybersecurity, and protecting our systems
· Fulfilling statutory, regulatory, or contractual obligations
We do not sell, rent, or trade your personal data to third parties.
5. Disclosure of Information
We may disclose your information to:
5.1 Service Providers
Third-party vendors who support:
· Web hosting
· Payment and financial processing
· Analytics and marketing tools
· Customer communication and cloud providers
These providers are contractually obligated to maintain confidentiality and data security.
5.2 Partners & Collaborators
Only with:
· Your consent, or
· When legally permitted
5.3 Legal Authorities
We may disclose information if necessary to:
· Comply with applicable laws
· Respond to lawful requests or court orders
· Protect our rights, systems, users, partners, or public safety
5.4 Cross-Border Transfers
Your data may be transferred outside your home jurisdiction. We ensure legally mandated safeguards, including:
· Standard Contractual Clauses
· POPIA Section 72 safeguards (South Africa)
· NDPR Level 2 compliance (Nigeria)
· Kenya DPA transfer requirements
· Encryption and secure transfer protocols
You acknowledge and consent to such transfers.
6. Data Retention
We retain personal information only for as long as:
· Necessary to fulfil stated purposes
· Required by law
· Needed for legitimate business interests
· Required for audit, tax, or dispute resolution
After retention periods expire, data is securely archived, anonymised, or destroyed.
7. Data Security
We use reasonable and appropriate administrative, technical, and physical safeguards including:
· Encryption
· Access controls
· Firewalls
· Secure servers
· Regular audits
However, no method of transmission or storage is completely secure. You agree that Forward Impact is not liable for breaches beyond our reasonable control.
8. Cookies & Tracking Technologies
We use cookies and similar technologies for:
· Authentication
· Analytics
· Personalisation
· Website optimisation
You may disable cookies in your browser, but some features may not function properly.
9. Third-Party Websites
Our website may contain links to external sites. We are not responsible for their:
· Content
· Privacy practices
· Security standards
We encourage reviewing third-party policies before engaging with them.
10. Children’s Privacy
Our services are not directed at persons under 14 years of age. We do not knowingly collect data from such individuals. If discovered, such data will be promptly deleted.
11. Your Rights (Jurisdiction-Specific)
Depending on your location, you may have rights including:
· Right to access
· Right to correction/rectification
· Right to deletion (where legally permitted)
· Right to restrict or object to processing
· Right to withdraw consent
· Right to data portability (if applicable)
· Right to lodge a complaint with a Data Protection Authority
We reserve the right to verify your identity before responding to requests.
Submit requests at: people@forward-impact.org
12. Limitation of Liability
To the maximum extent permitted by applicable laws:
· Forward Impact is not liable for indirect, incidental, punitive, or consequential damages arising from misuse of your data, third-party breaches, or force majeure events.
· You agree that your use of our website and services is at your sole risk.
· We do not guarantee uninterrupted, error-free, or fully secure website operations.
13. Indemnification
You agree to indemnify and hold harmless Forward Impact, its directors, employees, agents, partners, and affiliates against claims, losses, damages, or liabilities arising from:
· Your breach of this Policy
· Your misuse of our website or data
· Your violation of third-party rights
· Any negligent or unlawful action by you
14. Changes to This Policy
We may update this Policy at any time. Revised versions are effective upon posting. Your continued use after updates constitutes acceptance.
15. Contact Information
For privacy concerns, complaints, or rights requests:
Forward Impact Email: people@forward-impact.org Website: http://www.forward-impact.org
We will respond within timelines required by applicable laws.