Privacy Policy

At Elephants in Main Street International, we, led by our Global Technology and Operations team, are dedicated to respecting and protecting the privacy of our website users. This Privacy Policy explains how we collect, use, share, and safeguard your data in compliance with the General Data Protection Regulation (GDPR), the Protection of Personal Information Act (POPIA), and the Australian Privacy Act.

1. Information We Collect

We may collect the following types of data when you visit our website:

  • Personal Data: Information that identifies you personally, such as your name, contact information, and payment details.
  • Usage Data: Information about your interactions with our website, like IP address, device type, browser, and browsing activity, often collected through cookies and other tracking technologies.

2. Legal Bases for Processing

Under GDPR, we process your data only on the following legal bases:

  • Consent: When you provide us explicit permission to process your data.
  • Contractual Need: When processing is necessary for contract performance or pre-contract steps.
  • Legitimate Interests: When processing is essential for our legitimate business interests, balanced against your rights.
  • Legal Compliance: When processing is required to meet a legal obligation.

Under POPIA and the Australian Privacy Act, we take all reasonable steps to ensure data is accurate, complete, and not misleading.

3. How We Use Your Information

We process the data we collect to:

  • Provide and improve our services and website functionality.
  • Customise your experience based on your preferences.
  • Respond to inquiries and requests for information.
  • Send marketing communications, where legally permitted, and with your consent when required.

4. Data Sharing

We never sell, rent, or trade your personal information. We may share your data with:

  • Service Providers: Trusted third-party providers that assist us with services.
  • Legal Authorities: To comply with legal obligations or respond to valid legal requests.

5. International Data Transfers

If data transfers occur outside your home country, we ensure adequate protection of your data in line with GDPR, POPIA, and Australian Privacy Act standards, including appropriate data transfer agreements.

6. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Retention times vary depending on data type and purpose of collection.

7. Data Security

We employ technical and organisational measures to safeguard your data against unauthorised access, alteration, and loss. While we strive for robust security, no system is completely secure.

8. Your Rights

Subject to applicable laws, you may have the following rights:

  • Access: Request access to your data.
  • Rectification: Request correction of any inaccurate information.
  • Erasure: Request deletion of data, under certain conditions.
  • Restriction: Restrict processing of your data.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to certain processing activities.
  • Consent Withdrawal: Withdraw your consent at any time where consent is the basis for processing.

To exercise any of these rights, please contact us at [contact email].

9. Cookies and Tracking Technologies

We use cookies to personalise your experience and analyse site usage. You can adjust your browser settings to refuse cookies, but some features may be affected.

10. Children’s Privacy

Our website is not intended for children under 13, and we do not knowingly collect information from children.

11. Changes to Our Privacy Policy

We may update this Privacy Policy as needed. Major changes will be posted on this page with an updated effective date.

12. Contact Us

For questions or to exercise your rights, please contact us at:

Sabrina Blades
Global Technology and Operations Manager
Elephants in Main Street International

Trending