Privacy Policy
StreetBiz Foundation is committed to safeguarding the privacy and personal data of our youth changemakers, international mentors, donors, and partners in full compliance with POPIA and GDPR.
Your Trust & Privacy Matter
Whether you are applying to the Be a Nelson Movement, mentoring as a Dolphin coach, funding grassroots community enterprises, or subscribing to our updates, your personal data is handled securely, ethically, and strictly for developmental and statutory purposes. We do not sell, rent, or trade your personal information.
Introduction
StreetBiz Entrepreneurial Mindset Foundation NPC (operating as StreetBiz Foundation, "we", "us", or "our") is a registered Non-Profit Company in the Republic of South Africa (Registration Number: 2018/356208/08; Tax Number: 9193637247; Section 18A Approved Public Benefit Organisation).
We are committed to safeguarding the privacy and personal information of our website visitors, program applicants, youth changemakers ("Nelsons"), international and local mentors ("Dolphins"), donors, corporate partners, and volunteers.
This Privacy Policy sets out our data processing practices in compliance with:
- The Protection of Personal Information Act, No. 4 of 2013 (POPIA) of South Africa; and
- The General Data Protection Regulation (EU) 2016/679 (GDPR), as applicable to international mentors, academic collaborators, and donors.
Responsible Party & Contact Details
StreetBiz Entrepreneurial Mindset Foundation NPC acts as the Responsible Party (Data Controller).
205 Zeezicht, Beach Boulevard, Table View, Cape Town, Western Cape, 7439, South Africa
PO Box 65076, Erasmusrand, Gauteng, 0165, South Africa
+27 82 566 1484
Information Officer: CEO / Executive Administration (hello@streetbiz.co.za)
Categories of Personal Information We Collect
We collect personal information directly when you visit our site, submit forms, apply for initiatives, donate, or volunteer:
General Inquiries & Contact Forms
Full name, email address, phone number, organization name, and inquiry details.
Newsletter & Updates
Name, email address, and communication preferences.
Program Applicants & Participants ("Nelsons")
Full legal name, date of birth, identity/passport number, contact details, township location, education history, enterprise pitch submissions, project milestones, and course progress records.
Mentors, Coaches & Volunteers ("Dolphins")
Name, email, professional background, LinkedIn profile, geographic location, time zone, and session logs.
Donors & Sponsors
Name, organization details, billing address, donation amounts, payment reference IDs, and tax information required for issuing South African Section 18A Tax Certificates. (Note: Credit card transactions are handled securely by external, PCI-compliant payment gateways; StreetBiz does not store raw credit card numbers).
Media & Storytelling
Photographs, video recordings, audio interviews, and case studies captured during workshops, bootcamps, and events (processed strictly with prior consent).
Website Usage & Cookies
IP address, browser type, device details, and page interaction analytics.
Lawful Bases for Processing
Under POPIA and GDPR, we process data on the following lawful grounds:
Consent
Clear, explicit consent provided during newsletter signups, program applications, and media release forms.
Contractual & Programmatic Necessity
To deliver educational courses, mentorship pairing, bootcamps, and certification.
Legal Obligation
To meet statutory requirements under South African law, including CIPC governance and SARS tax reporting for Section 18A donations.
Legitimate Interests
To maintain site security, evaluate social impact, and expand community opportunities.
Purpose of Processing
Cross-Border Data Transfers
StreetBiz Foundation collaborates with international partners, including global academic and innovation platforms (Democratizing Innovation Institute in the USA, RebelBase), and international mentors across Europe and North America.
When data is transferred across South African borders:
- We verify that recipient jurisdictions or platforms maintain adequate data protection safeguards aligned with POPIA;
- We utilize standard data transfer agreements and confidentiality commitments; or
- We obtain explicit consent from the participant for international mentorship pairing.
Third-Party Disclosures
We do not sell, rent, or trade personal data. We share data solely with trusted third-party service providers performing essential functions:
Learning & Collaboration
RebelBase, Democratizing Innovation Institute (DI²), Google Workspace, Zoom, Microsoft Teams.
Payment & Banking
Regulated payment gateways (e.g., PayPal) and commercial banking partners.
Statutory Bodies
SARS, CIPC, and the Department of Social Development as legally mandated.
Data Security & Retention
Security: We apply technical and organizational safeguards (access controls, encryption, secure cloud infrastructure) to protect personal data from unauthorized access or destruction.
Retention: Personal data is retained only as long as necessary to fulfill the intended purpose or comply with statutory retention periods (e.g., Section 18A financial and donation records are retained for 5 years per SARS requirements).
Special Personal Information & Minors
We do not knowingly collect personal information from individuals under 18 without verifiable parental or guardian consent.
Special personal information (such as emergency medical information for field expeditions or demographic data for equality monitoring) is processed strictly in accordance with Sections 26–33 of POPIA.
Your Data Rights
Under POPIA and the GDPR, you have the following rights regarding your personal information:
Right to Access
Request confirmation and copies of personal data held about you.
Right to Correction
Request rectification of inaccurate or outdated information.
Right to Deletion
Request destruction or deletion of your data where retention is no longer justified.
Right to Object & Restrict
Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent
Revoke previously granted consent at any time without penalty.
To exercise any of these rights, please email us at hello@streetbiz.co.za.
Complaints to the Information Regulator
If you have unresolved concerns about our data processing practices under POPIA, you may lodge a complaint with the South African Information Regulator:
Email: POPIAComplaints@inforegulator.org.za / enquiries@inforegulator.org.za
Physical Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001