Data Protection and Privacy Policy

This Data Protection and Privacy Policy is about how we respect privacy when we deal with personal information collected by our organisation

Section 1: Purpose and Objective

1.1 Purpose

This Data Protection and Privacy Policy applies to information we (Nourishing Schools Foundation) collect about children and individuals/organisations who interact with our organisation. It explains what personal information we collect and how we use it.

If you have any comments or questions about this policy, feel free to contact us at info@nourishingschools.org

1.2 Objective

The main objectives of the Data Protection and Privacy Policy are to formally communicate the mandatory privacy and data protection procedures/processes and responsibilities issued by the Nourishing Schools Foundation CEO (Archana Sinha) and Executive Management in order to:

  • To protect data privacy while communicating insights from our toolkit, impact data, partnerships, and operations with a wider audience
  • To protect data privacy while sharing our impact data through public dashboards/Impact reports through platforms such as our website
  • To protect data privacy while communicating and sharing our data with partner organisations/academic institutes.

Section 2: Scope

Personal data must always be processed in accordance with Data Protection Laws and this Policy. As we establish partnerships and share findings from our data, we seek to ensure that we are embedding data privacy into our systems, processes, and services. To achieve this, we are creating a data protection and privacy policy. This will guide our team and partners/organisation/individuals with how we collect, store, access, process and share data in a way that protects the privacy of our respondents and individuals/organisations who interact with our organisation.

 

Section 3: Personal data that we process

The following table explains the types of data we collect and the legal basis, under current data protection legislation within the Data Protection Laws on which this data is processed.

Purpose Data (key elements)
Data from the surveys of children (baseline, midline & endline surveys) in the form of Excel files, dashboards and reports Name, school name, district, demographic information, nutritional status, nutrition-related habits and behaviours
Enquiring about impact data/dashboard/toolkits and reports Name, email, message
Enquiring about our organisation and what we do Name, email, message
Subscribing to email updates about our work Name, email
Donation Name, email, address, payment information
Website functionality Website activity collected through cookies

Section 4: Principles and expectations

4.1 How we use data

Nourishing Schools Foundation only collects and processes personal data that is necessary for a specific, explicit and lawful purpose.

We collect data from schools and school children using a survey tool developed by Axxonet, we are legally obliged by the Data Protection Laws to ensure that the information schools and schoolchildren have provided is only used for the purpose of which it was intended, and to ensure that the data is kept securely.

For example, we may use your personal information to:

  • Make corrections to survey data as required
  • Reply to enquiries you send to us;
  • Handle donations that you initiate;

4.2 When we share user data

Nourishing Schools Foundation transfers, disclose and otherwise shares personal data within the Foundation and with third parties, such as its sub-processors, only after ensuring that appropriate safeguards are in place.

We will only share your data to third parties in the following circumstances:

  • We publish data on our website in form of dashboards/impact reports.
  • We share impact reports with partners and stakeholders involved.
  • We collaborate with academic institutes for data analysis and publication of the results in journals.

4.3 How long do we keep your data

We follow the principles of data minimisation, and we keep personal data with no due defined time.

4.4 Rights you have over your data

Nourishing Schools Foundation processes personal data in a fair and transparent manner and respects the rights of individuals.

You have a range of rights over your data, which include the following:

  • Users can revoke this consent at any time, and can withdraw from the data collection process.
  • Users have the right to access and modify their information.

4.5 Confidentiality and security

Nourishing Schools Foundation is committed to keeping personal data confidential and ensuring the secure processing of personal data.

We acquire and handle only the minimum amount of sensitive data strictly needed.

Section 5: Documentation

Nourishing Schools Foundation is accountable for the processing of the personal data by it and on its behalf. Due to this, Nourishing Schools Foundation must be able to demonstrate that such processing is conducted in a lawful and acceptable manner. In order for Nourishing Schools Foundation to fulfil these requirements, it thoroughly creates and updates documentation on its processing activities.

Section 6: Verification

This policy document is subject to periodic review to verify that the implementation of the requirements is satisfactory.

Section 7: Change History

 

Version Approval Date Owner Editor Approved By Changes
 1  June 24, 2022  Sana Elahi  Archana Sinha  NSF -       Added section on Principles and expectations to elaborate more on How we use your data, when we share your data, how long we keep your data and the rights you have on your data.
 2  June 30,2022  Sana Elahi  Archana Sinha   NSF -       Added a new section on verification for regular review to ensure that the implementation of the requirements is being done as advised in the document.

-       Added section on the documentation to create and update the document in the future as and when needed.
 3  July 8, 2022  Sana Elahi  Archana Sinha   NSF -       Added points on confidentiality and security of the sensitive data under the principles and expectations.