Skip to main content

Malala Fund Privacy Policy

Last Revised: November 2023

This Privacy Policy covers the use of personal data by the Malala Fund, a 501(c)(3) public charity based in the United States (US), and the Malala Fund UK, a charity registered in England and Wales with charity no: 1178655.

This Privacy Policy covers the use of personal data by the Malala Fund, a 501(c)(3) public charity based in the U.S., and the Malala Fund UK, a charity registered in England and Wales with charity no: 1178655.

This Privacy Policy explains how information about you is collected, used and disclosed by Malala Fund and Malala Fund U.K. (“Malala Fund“). This Privacy Policy applies to information we collect when you use our website and other online services that link to this Privacy Policy (collectively, the “Site“) or when you otherwise interact with us. Please read this Privacy Policy carefully before using the Site or submitting information to us. By accessing or visiting this Site, you indicate your understanding that the collection, use, and sharing of your information is subject to the terms of this Privacy Policy. If you do not consent to the collection, use, and sharing of your information as described in this Privacy Policy, please do not use the Site or provide us with such information.

If you are based in the UK or European Union, please see the “Additional information for Website Users in the UK and European Union (EU)” section below.

I. Changes to this Privacy Policy

We may change this Privacy Policy from time to time. Changes will be effective immediately upon posting to the Site and will apply to your use of the Site after the “effective date” listed above. You understand and agree that your continued use of the Site after the effective date, means that the collection, use, and sharing of your information is subject to the updated Privacy Policy.

Except to the extent we obtain your consent or as permitted or required by applicable law, we will handle your personal information collected through the Site in accordance with the terms of the Privacy Policy in effect at the time of such collection.

II. Collection of Information

Information You Provide Us: We may collect information from a variety of sources to operate the Site, carry out our mission, comply with laws and other purposes described herein. We collect information you provide directly to us. For example, we collect information when you sign up to receive emails, make a donation, become a fundraiser, participate in any interactive features of the Site (including creating an account and submitting a request through our contact forms) or otherwise communicate with us. The types of information we may collect include, ● First and last name, ● Email address, ● Postal address, ● Phone number, ● Fax number, and ● Credit card information.

Information We Collect Automatically When You Use the Site: When you access or use our Site, we automatically collect information about you using Google Analytics, including:

  • Log Information: We log information about your use of the Site, including the type of browser, access times, pages viewed, your IP address and the page you visited before navigating to our Site.
  • Device Information: We collect information about the computer or mobile device you use to access our Site, including the hardware model, operating system and version, unique device identifiers and mobile network information.
  • Information Collected by Cookies and Other Tracking Technologies: We use various technologies to collect information, and this may include sending cookies to your computer or mobile device. A cookie is a small text file that a website, online application, or e-mail may save to your internet browser and/or your computer’s hard drive for use in subsequent visits to the Site or other sites. We may also collect information using web beacons (also known as “tracking pixels”). Web beacons are electronic images that may be used in our Site or emails and help deliver cookies, count visits, understand usage and campaign effectiveness and determine whether an email has been opened and acted upon. For more information about cookies, and how to disable them, please see “Your Choices” below.

Information We Collect From Other Sources: We may also obtain information from other sources and combine that with information we collect through our Site. For example, if you interact with the Site through a social media site, we may have access to certain information from that site, such as your name, account information and friends lists, in accordance with the authorisation procedures determined by such social media site.

III. Use of Information

We may use information about you for purposes described in this Privacy Policy or otherwise disclosed to you on the Site or at the time of collection. For example, we may use information about you to:

  • Provide, maintain and improve our Site;
  • Send you technical notices, updates, security alerts and support and administrative messages;
  • Respond to your comments, questions and requests;
  • Process and administer donations that you make to us;
  • Communicate with you about services, offers, promotions, campaigns, and events offered by Malala Fund and others, and provide news and information we think will be of interest to you;
  • Monitor and analyse trends, usage and activities in connection with our Site;
  • Administer your online account with us;
  • Personalise and improve the Site and provide advertisements, content or features that match user profiles or interests;
  • To comply with applicable laws and regulations;
  • Link or combine with information we get from others to help understand your needs and provide you with better service; and
  • Carry out any other purpose for which the information was collected.

Malala Fund is based in the U.S. and the U.K. By accessing or using the Site or otherwise providing information to us, you are aware that your personal data will be processed in the U.S, the U.K. and in limited circumstances, in other countries in which the Malala Fund operates.

IV. Sharing of Information:

We may share information about you as follows or as otherwise described in this Privacy Policy:

  • With partners, vendors, consultants and other service providers who need access to such information to carry out work on our behalf, for example, to help run our Site and IT systems, to send undertake online marketing and to send emails on our behalf, and to facilitate online payments (e.g., PayPal and Give Lively);
  • In response to a request for information if we believe disclosure is in accordance with any applicable law, regulation or legal process, or as otherwise required by any applicable law, rule or regulation;
  • If we believe your actions are inconsistent with the spirit or language of our user agreements or policies, or to protect the rights, property and safety of Malala Fund or others;
  • In connection with, or during negotiations of, any merger, sale of organisational assets, financing or acquisition of all or a portion of our organisation to another entity; and
  • With your consent or at your direction, including if we notify you through our Site that the information you provide will be shared in a particular manner and you provide such information.
  • We may also share aggregated or de-identified information, which cannot reasonably be used to identify you.

In no instance will Malala Fund rent, sell or exchange (for any reasons other than those listed above) your data with other organisations.

Social Sharing Features: The Site may offer social sharing features and other integrated tools (such as the Facebook “Like” button), which let you share actions you take on our Site with other media, and vice versa. The use of such features enables the sharing of information with your friends or the public, depending on the settings you establish with the entity that provides the social sharing feature. For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy policies of the entities that provide these features.

Advertising and Analytics Site Provided by Others: We may allow others to serve advertisements on our behalf across the Internet and to provide analytics services. These entities may use cookies, web beacons and other technologies to collect information about your use of the Site and other websites, including your IP address, web browser, pages viewed, time spent on pages, links clicked and conversion information. This information may be used by Malala Fund and others to, among other things, analyse and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Site and other websites and better understand your online activity.

We also participate in Facebook’s ‘Custom Audience’ program which enables us to display ads to our existing supporters when they visit Facebook. We provide your email address, mobile number and address to Facebook so they can determine whether you are a registered account holder with them. Our adverts may then appear when you access Facebook. Your data is sent in an encrypted format that is deleted by Facebook if it does not match with a Facebook account.

For more information please see Facebook's information about Custom Audiences and Facebook’s Data Policy - https://en-gb.facebook.com/policy.php

For more information about Internet-based ads, or to opt out of having your web browsing information used for behavioural advertising purposes, please visit: www.networkadvertising.org/managing/opt_out.asp and www.aboutads.info/choices

Links to Other Websites:The Site may contain links to other sites. There is a possibility that those sites may use cookies to collect a visitor’s personal information. We cannot control the use of cookies by sites linked to our site and we are not responsible for the privacy practices or content of other sites.

Do Not Track:“Do Not Track” is a privacy preference that you can set in your Internet search browser that sends a signal to a website that you do not want the website operator to track certain browsing information about you. However, because our Site is not configured to detect Do Not Track signals from a user’s computer, we are unable to respond to Do Not Track requests. This Site does not collect personally identifiable information about an individual consumer’s online activities over time and across different Websites when a consumer uses our Site or service.

Information about Children:The Site is not directed to children as the products and services on this Site are intended for persons 18 years of age and older. Malala Fund does not knowingly collect, use or disclose any personal information from children. If you are concerned about your child’s use of the Site, you may use web-filtering technology to supervise or limit access to the Site. If we learn that a child under the age of 13 has submitted personally identifiable information online without parental consent, we will take all reasonable measures to delete such information from our databases and to not use such information for any purpose (except where necessary to protect the safety of the child or others as required or allowed by law). If you become aware of any personally identifiable information we have collected from children under 13, please contact us as described below.

V. Security

Malala Fund takes reasonable measures to help protect information about you from loss, theft, misuse and unauthorised access, disclosure, alteration and destruction.

Please be aware that despite our best efforts, no data security measures can 100% guarantee security. We encourage you to review the privacy statements of websites you choose to link to from the Site so that you can understand how those sites collect, use and share your information. Malala Fund is not responsible for the privacy statements or other content on sites outside of the Site.

VI. Your Choices

Your Information: You may ask us to update, correct or delete information about you at any time by emailing us with your request at info@malalafund.org, but note that we may retain certain information as required by law or for legitimate purposes related to our organisation.

We may also retain cached or archived copies of information about you for a certain period of time.

Cookies: Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Removing or rejecting browser cookies does not necessarily affect third party flash cookies used in connection with our Site. To delete or disable flash cookies please visit www.adobe.com/products/flashplayer/security. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Site.

The “help” portion of the toolbar on most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive new cookies or how to disable cookies altogether. If you reject cookies, you may not be able to participate in certain activities. The Site does not control and does not guarantee the effectiveness of browser-based tools for managing cookies.

Promotional Communications: You may opt out of receiving promotional emails or messages from Malala Fund at any time by following the instructions in those emails or messages, or by contacting us using the details below. If you opt out, we may still send you non-promotional communications, such as those that are necessary in connection with our ongoing service relationship (if applicable).

VII. Donor Bill of Rights

Malala Fund strongly believes in the rights of donors and subscribes to the Donor Bill of Rights. This statement of rights was developed by the Association of Fundraising Professionals (AFP), the Association for Healthcare Philanthropy (AHP), the Council for Advancement and Support of Education (CASE), and the Giving Institute: Leading Consultants to Nonprofits.

“Philanthropy is based on voluntary action for the common good. It is a tradition of giving and sharing that is primary to the quality of life. To assure that philanthropy merits the respect and trust of the general public, and that donors and prospective donors can have full confidence in the nonprofit organisations and causes they are asked to support, we declare that all donors have these rights:

  1. To be informed of the organisation's mission, of the way the organisation intends to use donated resources, and of its capacity to use donations effectively for their intended purposes;
  2. To be informed of the identity of those serving on the organisation's governing board, and to expect the board to exercise prudent judgement in its stewardship responsibilities;
  3. To have access to the organisation's most recent financial statements;
  4. To be assured their gifts will be used for the purposes for which they were given;
  5. To receive appropriate acknowledgement and recognition;
  6. To be assured that information about their donation is handled with respect and with confidentiality to the extent provided by law;
  7. To expect that all relationships with individuals representing organisations of interest to the donor will be professional in nature;
  8. To be informed whether those seeking donations are volunteers, employees of the organisation or hired solicitors;
  9. To have the opportunity for their names to be deleted from mailing lists that an organisation may intend to share*; and
  10. To feel free to ask questions when making a donation and to receive prompt, truthful and forthright answers.”

*Note that no UK supporter data will be shared via a mailing list.

VIII. Additional Information for Website Users in the UK and European Union (EU)

For the purposes of the European Union’s General Data Protection Regulation (“EU GDPR”) and the retained EU law version of the EU GDPR (“UK GDPR), Malala Fund and Malala Fund UK are data controllers. This section of the privacy policy includes information that is specific to how we process the personal data of supporters and donors that are based in the UK and EU. The relevant privacy contact details of the Malala Fund and Malala Fund UK can be found below.

We will only use your personal data for the purposes for which we collected it (as explained above), unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

Our Legal basis for Using Data: Data controllers need a lawful basis to collect and use your personal data under EU data protection law. The law allows for six ways to process personal data (and additional ways for sensitive personal data). Three of these are relevant to the types of processing that the Malala Fund carries out. This includes information that is processed on the basis of:

  • A person’s consent (for example to send you direct marketing by email);
  • Processing that is necessary for compliance with a legal obligation (for example to process a donation); and
  • Malala Fund’s legitimate interests (please see below for more information).

Personal data may be legally collected and used if it is necessary for a legitimate interest of the organisation using the data, as long as that interest is not overridden by the privacy rights of the individual whose data is being used. Malala Fund’s legitimate interests include:

  • Charity governance, including delivery of our charitable purposes, statutory and financial reporting and other regulatory compliance purposes;
  • Administration and operational management, including responding to solicited enquires, providing information, research, events management, the administration of volunteers and employment and recruitment requirements.
  • Fundraising and campaigning, including administering campaigns and donations, and sending direct marketing by post, sending thank you letters and maintaining communication suppressions.

If you would like to change our use of your personal data in this manner, please get in touch with us using the details in the “Contact Us” section below.

How Long We Retain Data: We will keep your personal data for no longer than is necessary for the purposes for which it is processed, in accordance with our internal policies. The length of time that data will be kept may depend on the reasons for which we are processing the data and on the law or regulations that the information falls under such as financial regulations, statutory limitation periods or any contractual obligation we might have. Subject to the above, we will typically store data relating to donors and supporters for 7 years after their last donation or interaction with us unless there is a justifiable reason to keep it for longer. Once the retention period has expired, the information will be confidentially disposed of, permanently deleted, or in some cases archived.

If you request to receive no further contact from us, we will keep some basic information about you on our suppression list in order to avoid sending you unwanted materials in the future.

Transfers Outside of the European Economic Area (“EEA”): As Malala Fund is based in the U.S, any data that you provide to us via the Site or otherwise will be transferred to and held in the U.S. Data transfers that are made from Malala Fund UK to Malala Fund in the U.S. will be conducted securely and in accordance with EU-approved model contract clauses. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA or the UK.

Your Rights: You have a number of rights under EU data protection legislation. These include:

  • Right of Access: You have the right to know what information we hold about you and to ask, in writing, to see your records. We will supply any information you ask for that we hold about you as soon as possible, but this may take up to one month or occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests (and this time period applies to our response to the exercise of any of your other rights). We will not charge you for this. You will be asked for proof of identity as the person dealing with your request may not be the staff member you have met before. We need to be sure we are only releasing your personal data to you. This is called data subject access and can be done by writing to us using the “Contact Us” details.
  • Right to be Informed: You have the right to be informed how your personal data will be used. This policy as well as any additional information or notice that is provided to you either at the time you provided your details, or otherwise, is intended to provide you with this information.
  • Right to Withdraw Consent: Where we process your data on the basis of your consent (for example, to send you marketing emails) you can withdraw that consent at any time. To do this, or to discuss this right further with us, please contact us using the details in the “Contact Us” section below. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
  • Right to Object: You also have a right to object to us processing data where we are relying on it being within our legitimate interests to do so (for example, to send you direct marketing by post). To do this, or to discuss this right further with us, please contact us using the details in the “Contact Us” section below.
  • Right to Restrict Processing: In certain situations you have the right to ask for processing of your personal data to be restricted because there is some disagreement about its accuracy or legitimate usage.
  • Right of Erasure: In some cases, you have the right to be forgotten (i.e. to have your personal data deleted from our database). Where you have requested that we do not send you marketing materials we will need to keep some limited information in order to ensure that you are not contacted in the future.
  • Right of Rectification: If you believe our records are inaccurate you have the right to ask for those records concerning you to be updated. To update your records please get in touch with us using the details in the “Contact Us” section below.
  • Right to Data Portability: Where we are processing your personal data because you have given us your consent to do so, you have the right to request that the data is transferred from one service provider to another.
  • Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing of your personal information which produces legal or similarly significant effects on you, unless such a decision (a) is necessary to enter into/perform a contract between you and us/another organisation, (b) is authorised by EU or Member State law to which the Malala Fund is subject (as long as that law offers you sufficient protection); or (c) is based on your explicit consent.

If you would like to exercise any of these rights please get in touch with us using the details in the “Contact Us” section below. If you are unhappy with the way in which we have handled your personal data please contact us using the details below. You are also entitled to make a complaint to the data protection regulator within your EU member state, for example, the Information Commissioner’s Office in the UK.

IX. Contact Us

If you have any questions about this Privacy Policy, please contact us at info@malalafund.org.