Privacy Policy – Ngaara School Meals

Last updated: 8 June 2026

Who We Are

About this policy

Ngaara School Meals is an Irish registered charity (RCN 20206850). We fund a daily school meals programme at Ngaara Primary School, Mbarara, Uganda. We are a volunteer-run organisation with no paid staff.

This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR) and Irish data protection law.

Our contact email is contact@ngaara-school-meals.org

What We Collect

Personal data we process

Donations made via Stripe

When you make a donation through our website, your payment is processed by Stripe, Inc. We do not store your card details. Stripe may collect your name, email address, and payment information to process your donation. Stripe acts as a data processor on our behalf. Their privacy policy is available at stripe.com/ie/privacy.

We may receive a record of your donation (amount and date) for our financial records and CRA reporting obligations. We do not receive your full card details at any point.

Email contact

If you contact us by email, we will receive your email address and any personal information you include in your message. We use this only to respond to your enquiry and do not add you to any mailing list without your explicit consent.

Why We Use It

Legal basis and purpose

We process personal data on the following legal bases:

✓ Contractual necessity — to process your donation and provide a receipt where requested.
✓ Legal obligation — to maintain financial records as required by the Irish Charities Regulatory Authority.
✓ Legitimate interests — to respond to your enquiries and maintain a record of communications relevant to the charity’s work.

How Long We Keep It

Retention

Donation records are retained for seven years in line with Irish charity accounting requirements.

Email correspondence is retained for as long as it is relevant to the charity’s work and deleted when no longer needed.

We do not hold mailing lists or marketing databases.

Who We Share It With

Data sharing

We do not sell, rent, or trade personal data. We share data only where necessary:

✓ Stripe, Inc. — payment processor. Data is processed in accordance with their privacy policy and GDPR-compliant data processing agreement.
✓ Irish Charities Regulatory Authority (CRA) — as required for annual regulatory reporting.

Cookies and tracking

This website does not use analytics cookies or tracking technologies. We do not use Google Analytics, Facebook Pixel, or any similar tools.

Stripe’s payment pages may use cookies on their own domain when you complete a donation. This is governed by Stripe’s own cookie policy.

Your Rights

Your GDPR rights

Under GDPR you have the right to:

✓ Access — request a copy of any personal data we hold about you.
✓ Rectification — ask us to correct inaccurate data.
✓ Erasure — request deletion of your data, subject to our legal retention obligations.
✓ Restriction — ask us to limit how we use your data.
✓ Complaint — lodge a complaint with the Data Protection Commission Ireland at dataprotection.ie.

To exercise any of these rights, contact us at contact@ngaara-school-meals.org. We will respond within 30 days.

Changes

Updates to this policy

We may update this policy if our data practices change. The date at the top of this page reflects the most recent revision. Material changes will be noted.