Privacy Policy

Last updated 23 October 2026.

This policy explains what personal information Save7 collects, why, who we share it with and what your rights are under the Protection of Personal Information Act 4 of 2013 (POPIA).

Who we are

Save7 is a registered non-profit organisation (NPO 270-417, PBO 930078608) in South Africa. We are the responsible party for the personal information described here.

What we collect and why

We only ask for what we need for each purpose, and we tell you on every form what it’s for.

Organ donor registration (/register). Your first and last name, South African ID number, email address and phone number, and your consent. If you’re 16 or 17, your parent’s or guardian’s consent. We use it to record your wish to be an organ donor, to register you with the Organ Donor Foundation and to send you a confirmation email. We process it because you consent to it. Your ID number is a unique identifier, so we treat it as sensitive: it is only used to register you. Registering again adds a new record and doesn’t change an earlier one; to correct or remove your details, contact us and we’ll confirm your identity first.

Donations. PayFast processes your payment; we never see your card or bank details. The donation form sends PayFast your name, email address, the amount, and whether you asked for a Section 18A tax certificate or made the donation in someone’s honour (with their name), and PayFast passes these on to us. We use this to thank you, issue your tax certificate and keep the financial records the law requires.

Donations in honour. If you give R5 000 or more in someone’s honour, the name you enter goes on a plaque inside a LifePod donor ICU, where staff, patients and visitors can see it. Only enter someone’s name if they, or their family, are happy for it to be displayed. Email us to change or remove a name.

Google Forms (volunteering, sharing your story, sponsoring a UCT course place, Section 18A tax certificates). What you enter in the form. For a Section 18A certificate, that is your donation reference and the details the law requires on the certificate. These are our forms and we are responsible for what you submit; Google stores it for us.

Newsletter. Your email address, with your consent. We only email you if you signed up, and you can unsubscribe at any time.

KEPSA applications (/kepsa). Your name, email address, phone number (optional), institution, role and message. We use it to assess your application and run the programme.

Emails you send us. Whatever you choose to include, used to reply to you.

Website usage. We measure which pages are visited and which outside links are clicked, to improve the site. We don’t use cookies for it or build profiles. A random ID for your browser tab can link a visit to a form you submit or a donation you make, so this is pseudonymous rather than anonymous. See Cookies and analytics.

We don’t sell your information, and we don’t make automated decisions about you.

Children

You have to be 16 or older to register as an organ donor, the age at which South African law lets you make a will and donate your organs. POPIA treats anyone under 18 as a child, so if you’re 16 or 17, a parent or guardian has to give their consent on the form before we register you. We don’t knowingly collect information from children for anything else.

Who we share it with

The Organ Donor Foundation receives your registration details so it can add you to its donor register. We share them through a spreadsheet that only Save7 and the Organ Donor Foundation can access. We share donor registrations with no one else.

We also use service providers (operators, in POPIA’s terms) that process information for us, under our instructions:

Some of these providers are outside South Africa. We only use providers bound by law or agreement to protect your information to a standard substantially similar to POPIA (section 72).

We may also disclose information when the law requires it.

Cookies and analytics

• PostHog records page views and clicks on outside links. It stores a random ID in your browser’s session storage, which is deleted when you close the tab. It doesn’t set cookies, record your screen or capture what you type.
• Our own analytics records the page address, the referring page and outside link clicks, with no ID, IP address or cookie.
• Ad-click identifiers. A link from an ad can add an identifier to the page address (such as gclid or fbclid). We remove these before our own analytics stores the address, and mask them before it goes to PostHog.
• Google Ads measures whether our ads work. We tell it not to use advertising or analytics cookies, but it still receives basic information about your visit, such as your IP address and the page you’re on, and it is told when a registration or donation is completed (not who you are or how much you gave). If you came from one of our Google ads, we keep the ad’s click identifier in your browser’s session storage, which is deleted when you close the tab, and add it to the address of the confirmation page, so Google can link the registration or donation to the ad. It doesn’t load on the registration form.
• Cloudflare Turnstile checks your browser when you use a form. See Cloudflare’s Turnstile privacy addendum.
• YouTube videos only load, from youtube-nocookie.com, when you press play. The preview image loads from YouTube before that.
• Bluesky loads the embedded post on the LifePod page.
• The chat assistant on the home page is run by Botpress, which stores what you type in the chat. Please don’t share your ID number or other sensitive details there.

Our Google Forms open on Google’s site, which can set its own cookies. Google’s privacy policy covers that; this policy covers what you submit.

How long we keep it

• Donor registrations: until you ask us to remove yours.
• Donation records and Section 18A certificate requests: five years, as tax law requires.
• Plaque names: for as long as the plaque is displayed, or until you ask us to remove one.
• Newsletter subscriptions: until you unsubscribe.
• KEPSA applications: while you take part in KEPSA, and up to two years after.
• Emails: as long as we need to deal with your question.

After that, we delete the information or make it anonymous.

How we protect it

Information is encrypted between your browser and our servers. Only the Save7 team members who need it, and the Organ Donor Foundation for donor registrations, can access it. If your information is ever accessed without authorisation, we will tell you and the Information Regulator as POPIA requires.

Your rights

You have the right to:

• ask whether we hold information about you, and for a copy of it
• ask us to correct or delete it
• object to how we use it
• withdraw your consent at any time, for example to stop being registered as a donor or to unsubscribe
• refuse direct marketing
• complain to the Information Regulator

Email support@save7.org to use any of these rights. It’s free. We may ask you to confirm your identity first, so that we don’t give your information to someone else. We’ll tell you when we’ve made a correction or deletion. Withdrawing your consent doesn’t affect what we did before you withdrew it, and if you’re registered with the Organ Donor Foundation, we’ll ask them to remove you too.

Registering with us records your wish to donate, but in South Africa your family gives the final consent. Please tell them.

Changes

We may update this policy. The date at the top shows the latest version. Before we use your information for a new purpose, we’ll tell you and, where the law requires it, ask for your consent.

Complaints

If you’re unhappy with how we’ve handled your information, please contact us first. You can also complain to the Information Regulator at POPIAComplaints@inforegulator.org.za.