Privacy Policy

Effective date: 11 May 2026 Last updated: 11 May 2026

1. About this policy

This Privacy Policy explains how the SameSame Collective handles personal information collected through our website, www.samesamecollective.org.

The SameSame Collective is operated by two affiliated nonprofit entities:

  • SiyaFanaFana NPC (operating as SameSame), a nonprofit corporation registered in South Africa under registration number 2021/984428/08 and tax number 9201870269. SiyaFanaFana NPC is the responsible party for the purposes of the Protection of Personal Information Act, 2013 (POPIA).

  • SameSame Inc, a 501(c)(3) nonprofit organisation registered in the United States of America under EIN 35-2723295.

Together in this policy we refer to ourselves as SameSame, we, us or our.

This policy covers only the website. The services we deliver via WhatsApp under our programme brands — including FanaFana (South Africa), TakaTaka (Zimbabwe), SabiSabi (Nigeria), and GoalDigger, HeartWork and Queerly Beloved (across South Africa, Zimbabwe, Zambia, Botswana, Namibia, Lesotho and eSwatini) — are governed by separate terms and privacy notices delivered inside those services. If you are looking for information about how we handle data in those programmes, please refer to the terms shown to you when you start a conversation with the relevant chatbot.

2. What the website does

Our website is an information-only site. It tells people about who we are, what we do and how to support our work. The only ways you can interact with us through the website are:

  • by signing up for our email updates; and

  • by contacting us through our contact form.

We do not deliver any of our programmes or services through the website itself.

3. Information we collect

We only collect personal information that you choose to give us. Specifically:

If you sign up for email updates, we collect your email address and, where you choose to provide it, your name.

If you contact us through the contact form, we collect your name, your email address, and the contents of the message you send us. If you choose to include other information in your message (for example a phone number, or details about your situation), we will also receive that information.

We do not use cookies, analytics tools, advertising pixels or any other tracking technology on this website. We do not collect information about your device, your location or how you use the site.

4. Why we use your information

We use the information you give us for the following purposes only:

  • to send you the email updates you have signed up for;

  • to respond to messages you send us through the contact form;

  • to keep records of communications for our internal administration and to comply with legal and funder reporting obligations; and

  • where you have asked us a question that relates to one of our programmes, to refer you to the right team or partner.

We will not use your information for any other purpose without first asking you.

5. How we share your information

We do not sell your personal information. We do not share it with advertisers or data brokers.

We only share personal information in the following limited circumstances:

  • with service providers who help us run the website, send email updates or store our records, and who are contractually required to protect your information and use it only on our instructions;

  • with our auditors, lawyers and professional advisors, where reasonably necessary;

  • where we are required to do so by a law that protects rather than endangers the people involved; and

  • where it is necessary to protect the life or safety of a person.

In line with our Safeguarding Policy, we operate in environments where LGBTQI+ identity is criminalised or socially dangerous. We store sensitive personal data in jurisdictions with strong privacy protections, and outside countries that criminalise LGBTQI+ identities.

6. International transfers

We operate across South Africa, the United States and several other countries. The personal information you give us through the website may be processed in any of these countries by SameSame staff or our service providers. Where information is transferred out of South Africa, we do so in line with section 72 of POPIA, by using providers in countries with comparable protection, by binding contractual safeguards, or with your consent.

7. How long we keep your information

We keep your information for as long as we need it for the purpose for which you gave it to us:

  • Email updates: until you unsubscribe, after which we retain a minimal record of your unsubscribe request to make sure we do not contact you again.

  • Contact form submissions: for up to 24 months after our last exchange with you, after which we delete them, unless we are required to retain them for longer for legal or funder reporting purposes.

8. Your rights

Depending on where you live, you have rights over the information we hold about you. In particular, under POPIA and comparable laws, you have the right to:

  • ask us what information we hold about you;

  • ask us to correct information that is inaccurate or out of date;

  • ask us to delete information we no longer need;

  • withdraw your consent to receive email updates at any time, by clicking the unsubscribe link in any of our emails or by emailing us; and

  • complain to a supervisory authority. In South Africa, this is the Information Regulator (inforegulator.org.za).

You can exercise any of these rights by emailing info@samesamecollective.org. We will respond within a reasonable time, and in any event within the timeframes required by law.

9. Children

Our website is intended for adults. We do not knowingly collect personal information from people under 18 through our website. If you are a parent or guardian and believe your child has given us information, please contact us and we will delete it.

10. Security

We take reasonable technical and organisational steps to protect the information you give us, including encryption in transit, access controls and the principle of least privilege for staff access. No system is perfect, but we take security seriously and we will tell you, and the relevant regulator, if a breach occurs that is likely to put you at risk.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the effective date at the top.

12. How to contact us

For any question about this policy, or to exercise your rights:

SiyaFanaFana NPC (operating as SameSame) Email: info@samesamecollective.org Website: www.samesamecollective.org

For safeguarding concerns specifically, please use the channels set out in our Safeguarding Policy, including safeguarding@samesamecollective.org.