Introduction
Welcome to Just Help Me Foundation (JHMF). Just Help Me Foundation is committed to protecting the privacy, confidentiality, integrity, and security of all personal information entrusted to the Foundation by members, donors, volunteers, beneficiaries, employees, applicants, partner organizations, service providers, visitors, and every other individual or entity interacting with the Foundation through its official digital platforms.
This Universal Data Protection Policy establishes the Foundation’s principles, standards, governance framework, and responsibilities for the lawful collection, processing, storage, use, disclosure, retention, transfer, protection, and disposal of personal information. The Foundation recognizes that responsible data protection is fundamental to maintaining public trust, ensuring regulatory compliance, protecting individual rights, and supporting ethical nonprofit governance.
This Policy has been developed in accordance with internationally recognized data protection principles, cybersecurity best practices, and applicable legal requirements governing personal information, digital services, electronic communications, nonprofit organizations, and information security.
By accessing, registering, applying, donating, volunteering, participating in programs, creating an account, submitting information, or otherwise interacting with any official digital platform of Just Help Me Foundation, every individual acknowledges that they have read, understood, and accepted this Universal Data Protection Policy together with the Foundation’s Privacy Policy, Terms and Conditions, Cookie Policy, and other applicable organizational policies.
Scope of this Policy
This Universal Data Protection Policy applies to every activity involving personal information carried out by Just Help Me Foundation through its official websites, mobile applications, online portals, software platforms, payment gateways, cloud services, APIs, membership systems, recruitment systems, award platforms, volunteer platforms, donation platforms, digital verification services, customer support systems, communication platforms, and every other official digital or physical operation of the Foundation.
This Policy applies to all official digital properties including but not limited to:
Without limitation, this Policy currently applies to the following official domains:
This Universal Data Protection Policy shall automatically extend to every future domain, website, subdomain, mobile application, software platform, cloud service, API, online portal, payment platform, digital system, or any other technology officially owned, operated, managed, licensed, or authorized by Just Help Me Foundation without requiring the publication of a separate Data Protection Policy.
Purpose of this Policy
The purpose of this Policy is to establish a comprehensive framework for safeguarding personal information throughout its lifecycle. The Foundation is committed to ensuring that personal data is processed lawfully, fairly, transparently, securely, and responsibly while respecting the rights and legitimate interests of all individuals.
This Policy seeks to minimize privacy risks, strengthen cybersecurity, prevent unauthorized access, reduce the likelihood of data breaches, promote accountability, improve organizational governance, support lawful data processing, and foster public confidence in the Foundation’s digital services and charitable activities.
Data Protection Principles
Just Help Me Foundation processes personal information according to the following fundamental principles:
Personal information shall be collected only for lawful, legitimate, and clearly defined purposes. Data shall be processed fairly, transparently, and only to the extent necessary for the intended purpose. The Foundation shall make reasonable efforts to ensure that personal information remains accurate, complete, and up to date.
Appropriate technical, administrative, organizational, and physical safeguards shall be implemented to protect personal information against unauthorized access, accidental loss, unlawful disclosure, alteration, destruction, misuse, cyber threats, and other security risks. Personal information shall not be retained longer than necessary and shall be securely archived, anonymized, or destroyed when no longer required, subject to applicable legal and regulatory obligations.
The Foundation shall continuously review and improve its data protection practices to reflect evolving legal requirements, technological developments, cybersecurity standards, and internationally recognized best practices.
Categories of Protected Information
This Policy applies to all forms of personal information processed by the Foundation, including but not limited to identification information, contact details, demographic information, membership records, donation records, volunteer information, employment records, educational qualifications, payment information, digital identifiers, technical information, communication records, photographs, videos, identity verification documents, attendance records, project participation records, beneficiary information, financial records, and any other information capable of identifying an individual either directly or indirectly.
Special categories of personal information, where processed, shall receive enhanced protection consistent with applicable legal requirements and organizational safeguards.
Lawful Basis for Processing Personal Data
Just Help Me Foundation shall process personal information only where there is a valid legal basis recognized under applicable law. Depending upon the nature of the activity, personal data may be processed with the consent of the individual, for the performance of contractual obligations, compliance with legal or regulatory requirements, protection of vital interests, performance of tasks carried out in the public interest, legitimate organizational interests, safeguarding activities, charitable administration, fraud prevention, cybersecurity, or any other lawful basis permitted by applicable legislation.
Where consent serves as the legal basis for processing, individuals shall have the right to withdraw such consent at any time, subject to applicable legal obligations and the lawful processing that occurred before withdrawal.
Collection of Personal Information
Just Help Me Foundation may collect personal information directly from individuals through official websites, mobile applications, online registration forms, membership applications, employment applications, volunteer registrations, donation forms, event registrations, award nominations, surveys, customer support interactions, digital verification systems, official correspondence, or other authorized communication channels.
Personal information may also be collected from authorized representatives, partner organizations, government authorities, educational institutions, financial institutions, publicly available lawful sources, or other third parties where such collection is permitted by law and necessary for legitimate organizational purposes.
The Foundation shall make reasonable efforts to ensure that individuals are informed about the collection and intended use of their personal information whenever required by applicable law.
Processing Activities
Personal information may be processed for a variety of legitimate organizational purposes including membership administration, volunteer management, donor management, charitable program administration, beneficiary services, recruitment, training, certification, digital identity verification, event management, communication, fundraising, financial administration, project implementation, monitoring and evaluation, legal compliance, audit activities, cybersecurity, fraud prevention, dispute resolution, research, reporting, governance, and continuous organizational improvement.
The Foundation shall not process personal information for purposes that are incompatible with the original purpose of collection unless authorized by law or supported by an appropriate legal basis.
Data Accuracy
Just Help Me Foundation is committed to maintaining personal information that is accurate, complete, relevant, and up to date. Reasonable efforts shall be made to correct inaccurate information, update outdated records, and remove information that is no longer required or is demonstrably incorrect.
Individuals are encouraged to promptly notify the Foundation of any changes relating to their personal information so that organizational records may remain accurate and current.
Where inaccuracies are identified, the Foundation may take reasonable steps to verify updated information before modifying official records.
Data Minimization
The Foundation shall collect and process only the minimum amount of personal information reasonably necessary to accomplish legitimate organizational purposes. Personal information that is excessive, irrelevant, or unnecessary for the intended purpose shall not ordinarily be collected or retained.
Every new program, digital platform, software application, membership process, recruitment activity, donation system, or organizational initiative shall be designed, where reasonably practicable, to minimize the collection of personal information while maintaining operational effectiveness and legal compliance.
Data Retention
Personal information shall be retained only for as long as necessary to fulfill the purpose for which it was collected, to satisfy contractual obligations, comply with applicable laws, respond to legal proceedings, meet audit requirements, protect organizational interests, or fulfill legitimate administrative purposes.
At the conclusion of the applicable retention period, personal information may be securely archived, anonymized, pseudonymized, or permanently destroyed using appropriate technical and administrative safeguards designed to prevent unauthorized access, reconstruction, or disclosure.
Retention periods may vary depending upon legal requirements, regulatory obligations, operational needs, donor agreements, employment laws, financial regulations, litigation risks, or other applicable considerations.
Access Controls
Access to personal information shall be restricted to authorized individuals who require such access for legitimate organizational responsibilities. Access rights shall be assigned according to the principles of least privilege, role-based authorization, operational necessity, confidentiality, and accountability.
The Foundation may implement authentication mechanisms, password protection, multi-factor authentication, encryption, access logging, monitoring systems, user authorization controls, audit trails, and other security measures designed to prevent unauthorized access to personal information.
Personnel granted access to personal information shall be required to comply with confidentiality obligations and applicable organizational policies governing the protection of information.
Rights of Individuals
Subject to applicable laws, individuals whose personal information is processed by Just Help Me Foundation may have certain legal rights relating to their information. These rights may include the right to request access to personal information, request correction of inaccurate information, request deletion where legally appropriate, request restriction of processing, object to certain processing activities, request portability of eligible information, withdraw consent where consent is the legal basis for processing, and submit complaints relating to the handling of personal information.
The exercise of these rights may be subject to legal limitations, verification procedures, regulatory obligations, protection of third-party rights, ongoing investigations, contractual obligations, or other lawful restrictions recognized under applicable legislation.
Security Measures
Just Help Me Foundation implements appropriate administrative, technical, organizational, contractual, and physical safeguards designed to protect personal information against unauthorized access, accidental loss, unlawful destruction, alteration, disclosure, misuse, cyberattacks, ransomware, malware, phishing, insider threats, and other information security risks.
Security measures may include encryption technologies, firewalls, secure communication protocols, intrusion detection systems, endpoint protection, backup procedures, disaster recovery planning, cybersecurity monitoring, access management, vulnerability assessments, penetration testing, employee training, vendor security reviews, and continuous risk management practices.
While the Foundation strives to maintain robust security controls, no information system, electronic communication network, or internet-based service can guarantee absolute security.
Data Sharing and Disclosure
Just Help Me Foundation may share personal information only where such disclosure is necessary for legitimate organizational purposes, lawful charitable activities, payment processing, cloud hosting, information technology services, auditing, legal compliance, donor reporting where authorized, regulatory obligations, governmental requirements, judicial proceedings, fraud prevention, cybersecurity, contractual performance, or other lawful purposes.
Personal information shall be shared only with authorized recipients who are subject to appropriate confidentiality obligations, contractual safeguards, professional duties, statutory requirements, or other legally recognized protections.
The Foundation shall not sell personal information or knowingly disclose personal information for unauthorized commercial exploitation.
International Data Transfers
Just Help Me Foundation may utilize cloud infrastructure, payment service providers, communication platforms, technology vendors, cybersecurity services, digital storage providers, software applications, analytics providers, or other authorized third-party service providers that process or store information in jurisdictions outside the country where the information was originally collected.
Whenever personal information is transferred across national borders, the Foundation shall make reasonable efforts to ensure that such transfers are conducted in accordance with applicable data protection laws and are protected through appropriate legal, contractual, organizational, and technical safeguards designed to preserve the confidentiality, integrity, and security of personal information.
International transfers shall occur only where such transfers are necessary for legitimate organizational purposes, lawful charitable activities, technological operations, contractual obligations, regulatory compliance, or other legally recognized purposes.
Third-Party Data Processors
Just Help Me Foundation may engage trusted third-party service providers to perform specific services on its behalf, including website hosting, cloud computing, payment processing, cybersecurity, communication services, customer support, analytics, identity verification, document management, software maintenance, database management, event registration, digital certification, or other operational functions.
Every third-party processor receiving personal information shall be expected to maintain appropriate confidentiality obligations, security measures, contractual safeguards, and compliance standards consistent with applicable data protection laws and the Foundation’s internal governance requirements.
The Foundation shall make reasonable efforts to conduct appropriate due diligence before engaging third-party processors and may periodically review their compliance with contractual obligations and applicable security standards.
Data Breach Management
Just Help Me Foundation is committed to responding promptly and responsibly to any actual, suspected, or potential data breach affecting personal information under its control.
Where a security incident is detected, the Foundation may undertake appropriate measures including incident assessment, containment, investigation, forensic analysis, recovery procedures, risk mitigation, notification of affected individuals where legally required, reporting to competent regulatory authorities where applicable, implementation of corrective actions, and review of security controls to reduce the likelihood of future incidents.
The Foundation shall maintain appropriate incident response procedures designed to minimize harm, preserve evidence, restore secure operations, and ensure compliance with applicable legal and regulatory obligations.
Confidentiality Obligations
Every trustee, director, governing body member, employee, volunteer, consultant, contractor, intern, partner organization, technology provider, service provider, and any other individual authorized to access personal information shall maintain strict confidentiality regarding such information.
Confidential information shall not be disclosed, copied, transferred, published, sold, distributed, or otherwise used for any unauthorized personal, commercial, political, or unlawful purpose.
Confidentiality obligations shall continue even after termination of employment, membership, consultancy, contractual engagement, volunteer service, partnership, or any other relationship with the Foundation, unless disclosure is authorized by law or expressly approved in writing by an authorized representative of the Foundation.
Responsibilities of Personnel
Every individual authorized to process personal information on behalf of Just Help Me Foundation shall exercise the highest standards of professionalism, integrity, confidentiality, accountability, and ethical conduct.
Personnel shall comply with all applicable organizational policies, security procedures, password management requirements, access control measures, cybersecurity practices, incident reporting obligations, confidentiality agreements, and legal requirements relating to personal information.
The Foundation may provide periodic training, awareness programs, policy updates, cybersecurity education, and compliance guidance to strengthen the responsible handling of personal information throughout the organization.
Children’s Personal Information
Just Help Me Foundation recognizes the importance of protecting children’s privacy. Where the Foundation provides services intended for children or receives personal information relating to minors, reasonable safeguards shall be implemented to ensure compliance with applicable child protection and privacy laws.
Where legally required, parental consent, guardian authorization, institutional approval, or other lawful authorization may be obtained before collecting, processing, or disclosing personal information relating to children.
The Foundation shall make reasonable efforts to minimize the collection of children’s personal information and to process such information only where necessary for legitimate charitable, educational, safeguarding, or legally authorized purposes.
Automated Processing and Decision-Making
Just Help Me Foundation may utilize automated technologies, artificial intelligence tools, fraud detection systems, cybersecurity monitoring systems, identity verification technologies, analytics platforms, workflow automation, or other digital technologies to improve operational efficiency and strengthen organizational services.
Where automated processing significantly affects an individual’s legal rights or interests, the Foundation shall make reasonable efforts to ensure appropriate human oversight, transparency, fairness, and compliance with applicable legal requirements.
Automated systems shall be designed to support organizational decision-making and shall not be relied upon in a manner that unlawfully discriminates against individuals or violates applicable legal protections.
Compliance Monitoring and Audits
The Foundation may conduct periodic internal audits, compliance reviews, cybersecurity assessments, privacy impact assessments, vulnerability assessments, independent evaluations, governance reviews, and other monitoring activities to evaluate compliance with this Universal Data Protection Policy and applicable legal requirements.
Audit findings may be used to strengthen internal controls, improve governance, enhance cybersecurity, update operational procedures, reduce privacy risks, and support continuous organizational improvement.
Personnel are expected to cooperate fully with authorized audit and compliance activities conducted by the Foundation or competent regulatory authorities where legally required.
Risk Management
Just Help Me Foundation is committed to identifying, assessing, monitoring, and managing risks associated with the processing of personal information.
Risk management activities may include cybersecurity assessments, privacy impact assessments, vendor evaluations, access control reviews, encryption management, disaster recovery planning, business continuity planning, vulnerability management, penetration testing, employee awareness programs, incident simulations, and continuous monitoring of emerging technological and regulatory risks.
The Foundation shall periodically review its data protection framework to ensure that appropriate safeguards remain effective in response to evolving cybersecurity threats, legal developments, technological innovation, and operational changes.
Relationship with Other Policies
This Universal Data Protection Policy shall be interpreted together with the Foundation’s Universal Privacy Policy, Universal Terms and Conditions, Universal Disclaimer Policy, Universal Cookie Policy, Universal Information Security Policy, Universal Grievance Redressal Policy, Universal Membership Policy, Universal Donation Policy, Universal Refund and Cancellation Policy, Acceptable Use Policy, Records Retention Policy, Employment Policy, Volunteer Policy, and every other officially published policy governing the Foundation’s operations.
Where any issue relating to privacy, cybersecurity, confidentiality, information governance, or personal information is specifically addressed by another official policy, that policy shall prevail with respect to the relevant subject matter to the extent of any inconsistency.
Policy Amendments
Just Help Me Foundation reserves the absolute and continuing right to amend, revise, update, replace, interpret, modify, suspend, or withdraw this Universal Data Protection Policy at any time whenever such action is considered necessary to comply with changes in applicable laws, judicial decisions, regulatory requirements, international data protection standards, cybersecurity developments, technological innovations, organizational restructuring, operational improvements, or any other legitimate governance requirement.
The most recent version of this Universal Data Protection Policy shall always be published on the Foundation’s official digital platforms. Continued access to or use of any official website, mobile application, membership system, donation platform, payment gateway, employment portal, volunteer platform, software application, API, cloud service, or any other official digital platform following publication of an updated version shall constitute acceptance of the revised Policy.
Governing Law
This Universal Data Protection Policy shall be governed by, interpreted, and enforced in accordance with the laws applicable to the jurisdiction in which Just Help Me Foundation is legally established and operates, together with all applicable national and international legal requirements relating to privacy, data protection, cybersecurity, electronic communications, electronic records, nonprofit governance, consumer protection, financial compliance, and digital services.
Nothing contained in this Policy shall prevent the Foundation from complying with lawful requests, judicial orders, regulatory directives, governmental requirements, or law enforcement investigations where disclosure of information is required under applicable law.
Dispute Resolution
Any dispute, complaint, controversy, or claim arising from or relating to the collection, processing, storage, protection, disclosure, retention, transfer, or use of personal information under this Universal Data Protection Policy shall first be addressed through the Foundation’s official grievance and dispute resolution procedures.
Where a dispute cannot reasonably be resolved through internal procedures, the matter may be referred to the competent court, tribunal, arbitration authority, mediator, or any other legally authorized dispute resolution forum having jurisdiction under applicable law.
Nothing contained in this Policy shall prevent either party from seeking interim relief, emergency protection, injunctive orders, or any other remedy available under applicable law.
Severability
If any provision, clause, paragraph, sentence, or part of this Universal Data Protection Policy is declared invalid, unlawful, void, or unenforceable by any court of competent jurisdiction or legally authorized authority, such determination shall not affect the legality, validity, or enforceability of the remaining provisions.
The remaining provisions shall continue in full force and effect to the maximum extent permitted by applicable law, and the invalid provision shall, wherever reasonably possible, be interpreted in a manner that most closely reflects the original intent of the Foundation while remaining legally enforceable.
Entire Agreement
This Universal Data Protection Policy forms an integral part of the overall legal, governance, privacy, cybersecurity, compliance, and information management framework of Just Help Me Foundation. It shall be read together with the Foundation’s Universal Privacy Policy, Universal Terms and Conditions, Universal Disclaimer Policy, Universal Cookie Policy, Universal Donation Policy, Universal Refund and Cancellation Policy, Universal Membership Policy, Universal Grievance Redressal Policy, Universal Information Security Policy, Acceptable Use Policy, Records Retention Policy, Employment Policy, Volunteer Policy, NGO Partnership Policy, Award Policy, and every other officially published policy governing the Foundation’s operations.
Where any issue concerning privacy, information governance, cybersecurity, confidentiality, or personal data is specifically governed by another officially published policy, that policy shall prevail with respect to the relevant subject matter to the extent of any inconsistency.
Contact Information
Questions, requests relating to personal information, privacy inquiries, requests to exercise data protection rights, legal notices, compliance communications, cybersecurity concerns, breach notifications, or any correspondence relating to this Universal Data Protection Policy should be submitted only through the official communication channels published on the authorized digital platforms of Just Help Me Foundation.
Individuals are advised to communicate exclusively through officially published email addresses, online support systems, grievance portals, telephone numbers, or authorized Foundation offices to ensure the authenticity, confidentiality, and secure handling of all communications relating to personal information.
No Waiver
The failure or delay of Just Help Me Foundation to exercise or enforce any right, authority, remedy, or provision contained in this Universal Data Protection Policy shall not constitute a waiver of such right or remedy.
Any waiver shall be effective only if expressly made in writing by an authorized representative of the Foundation. A waiver relating to one specific matter shall not be interpreted as a continuing waiver or as a waiver of any future breach or any other provision of this Policy.
Survival
The provisions of this Universal Data Protection Policy relating to confidentiality, privacy, information security, intellectual property, audit rights, record retention, limitation of liability, indemnification, dispute resolution, governing law, regulatory compliance, and every other provision which by its nature is intended to survive shall remain valid and enforceable even after termination of membership, completion of employment, conclusion of volunteer service, closure of user accounts, completion of contractual obligations, deletion of personal information where legally permissible, or discontinuation of the use of any official digital platform operated by the Foundation.
Final Legal Declaration
By accessing, browsing, registering, creating an account, applying for membership, volunteering, making donations, submitting applications, participating in Foundation programs, communicating with the Foundation, using membership services, accessing online portals, utilizing payment gateways, submitting personal information, or otherwise interacting with any official website, domain, subdomain, mobile application, online portal, software platform, payment gateway, cloud-based service, API, digital verification system, membership platform, employment portal, volunteer platform, award platform, or any future digital service owned, operated, managed, licensed, or officially authorized by Just Help Me Foundation (JHMF), you acknowledge that you have carefully read, fully understood, and voluntarily accepted this Universal Data Protection Policy in its entirety.
This Universal Data Protection Policy shall apply uniformly to all present and future official websites, domains, subdomains, mobile applications, payment systems, membership platforms, volunteer systems, recruitment portals, award portals, cloud services, APIs, software platforms, digital verification services, information systems, databases, and every other official digital property administered by Just Help Me Foundation.
Your continued access to or use of any official digital platform after publication of an updated version of this Policy shall constitute your continued acceptance of the revised provisions.
Commitment to Responsible Data Governance
Just Help Me Foundation reaffirms its commitment to protecting the personal information entrusted to it through responsible governance, ethical leadership, transparency, accountability, continuous improvement, and internationally recognized data protection practices. The Foundation shall continue to strengthen its privacy framework, cybersecurity capabilities, governance systems, and operational controls to safeguard the rights, dignity, and trust of every individual who interacts with its charitable mission.
