Privacy Policy

1. Commitment to POPIA

Dankbud Private Club ("The Club") is the responsible party as defined in the Protection of Personal Information Act (POPIA). We are committed to protecting your personal information and collect only what is necessary to administer your membership and facilitate Club operations.

2. Information We Collect

• Identity Data: Full name, SA ID Number (strictly for age verification and membership legality).
• Contact Data: Email address, mobile number.
• Delivery Data: Physical address or PUDO locker preferences.
• Usage Data: Order history and preferences.

3. How We Use Your Data

We use your data strictly for:

• Verifying that you are Over 18 (Legal Requirement).
• Processing your Club contributions and allocating harvest.
• Facilitating delivery via our logistics partners (e.g., PUDO/Couriers).
• Communicating Club updates, harvest drops, and status alerts.

4. Data Sharing & Third Parties

We do NOT sell your data. We only share necessary data with service providers required to fulfill our obligations to you:

• Logistics: Courier Guy / PUDO (for delivery purposes only).
• Payments: Payment Gateway (Yoco) for secure processing.

5. Data Security

We employ industry-standard encryption and security measures (including secure database storage and Row Level Security) to protect your information from unauthorized access via Supabase.

6. Your Rights

Under POPIA, you have the right to:

• Request access to your personal information.
• Request correction of inaccurate information.
• Request deletion of your account (subject to legal retention requirements).
• Object to the processing of your personal information.
• Lodge a complaint with the Information Regulator.

Information Officer: Khalid du Preez (Executive Director)
Email: shotbykh@gmail.com

Information Regulator: inforegulator.org.za

7. Data Retention

We retain your personal information for the duration of your membership plus 5 years after termination, as required for legal and regulatory compliance. Financial records are retained for a minimum of 5 years in accordance with SARS requirements.

You may request deletion of your account at any time. We will delete your personal information except where retention is required by law.