Global Privacy Policy

Gretaful children's Orphanage is committed to protecting your privacy. This privacy statement describes how and why we obtain, store and process data which can identify you through this website.

Please read through this statement carefully as, by disclosing your information to us, you consent to the collection and use of your information in the manner described.

We may update this policy from time to time and shall indicate at the bottom of this page when changes have been made.

Gretaful children's Orphanage operates according to the best practice guidelines of the DMA Email Marketing Council. Gretaful children's Orphanage is registered with the Fundraising Regulator in the UK and subscribes fully to:

  • The General Data Protection Regulation (GDPR) (2018)
  • The Ugandan Data Protection and Privacy Act (2019)
  • The E-communications Act (2003)
  • The Charities Act (2016)

Your rights

You have the following rights under the General Data Protection Regulation 2018 and the Ugandan Data Protection and Privacy Act 2019:

  • The right to be informed how Personal Data is processed.
  • The right of access to your Personal Data.
  • The right to edit and update your personal information.
  • The right to have your personal information deleted.
  • The right to restrict processing of your personal information.
  • The right to object.
  • The right to lodge a complaint with a supervisory authority.

How we collect your information

We collect personal information from you when you register for updates from us (subscribe to our e-newsletter), make a donation or when you reach out to us directly (through post, email or face to face meeting).

How we use your information

We collect contact information to thank you for your support, inform you about ways in which you could get involved in our work and send you updates on how your support helps us do more.

We will only email and call you if you have given an explicit consent for us to do. We will use your postal address to send you information about our work if you have given us a donation in the past two years.

How we use cookies

We use cookies on our website browser which does not collect personal data but rather collects information which helps us assess how the website is used and how it can be improved.

You can disable cookies in your browser settings if you prefer not to allow us to do this, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that parts of this website may become inaccessible or not function property. See www.allaboutcookies.org for further information.

How we keep your Information secure

Keeping information about you secure is very important to us and we take every precaution against loss or damage of your information and to restrict disclosure of your information.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, altered, disclosed, used or accessed in an unauthorised way. In addition, we limit access to your personal data to only those employees, agents, contractors and third parties who need to know. They will only process your personal data on your instructions, and they are subject to a duty of confidentiality.

Certain sections of the site may encrypt data using SSL or a comparable standard. However, no data transmission over the Internet can be guaranteed to be totally secure. As a result, whilst we strive to protect your personal information, we cannot guarantee the security of any information which you send to us, and you do so at your own risk.

Information sharing

Gretaful children's Orphanage may share your personal data with third parties for any of the purposes set out above, including service providers e.g., lawyers, auditors, accountants, tax advisers, trustees, event organisers or other processors or service providers. We do not pass supporters’ details on to other third parties unless they agree to work under contractual agreements on our behalf. In rare cases we may need to disclose your information if required to do so by law.

Data transfers of personal information

The transfer of personal data from the UK to Uganda and Uganda to UK, and to any other countries will be in accordance with the Data Protection Laws in the UK and Uganda including, where applicable, under data transfer agreements.

Children’s privacy

We do not collect personal data from children (i.e. below the age of 16) other than in the ordinary course of our charitable work. We reserve the right to verify your information and can exercise our absolute discretion not to communicate with you if we are not satisfied that you are not a child. If we learn that a child has submitted personal data without parental consent, we will take all reasonable measures to delete such information from our databases and to not use such information for any purpose (except where necessary to protect the safety of the child or others as required or allowed by law). 

If you become aware of any personal data we have collected from children, please contact us at the address below. If a child has provided us with personal data, a parent or legal guardian of that child may contact us as described below. Upon confirmation, we will then make reasonable efforts to delete the child’s personal data from our database.

External Connections & Third Parties

Our mission often involves collaboration, but this privacy statement only applies to this website. While we may provide links to partner organizations or external applications, clicking those links may allow third parties to collect data. We do not control these external sites and encourage you to review the privacy notice of every website you visit to ensure your data remains protected.

Digital Engagement & Social Media

To share our stories of restoration with the right audience, we use social media tools for targeted engagement. For instance, a web pixel allows us to display updates to recent visitors when they visit platforms like Facebook. This helps us track the impact of our digital outreach and connect with people who care about family unity.

You can manage your preferences at any time via Facebook’s Custom Audiences Guide and their Data Policy.

Preserving Your Data with Purpose

We respect your privacy as much as we value your support. We retain basic contact details to ensure we honor your communication preferences and "do not mail" requests.

As required by law for financial and Gift Aid auditing, we maintain donation histories for 6 years. We also hold relevant details to support the administration of Legacy Gifts. For long-term analysis, we anonymize historical data so it can no longer be linked to you personally, ensuring we meet the minimum data requirements to fulfill the Grateful mission.

Your Rights & Preferences

You are always in control. You may request a copy of the personal information we hold by contacting our team.

If you wish to update your details or change how you hear from Grateful, please reach out to us at hello@grateful.org.

This policy was last updated on March 27, 2026.