This notice explains how the trust handles your personal information under the Protection of Personal Information Act (POPIA).
Who is responsible
The responsible party is Toekoms Trust Swellendam (PBO no. 930072909), 13 Scholtz Street, Swellendam, 6740. Email , phone .
What we collect
- Every donation: the plots, the amount, the payment reference, the date, and the payment provider's transaction number. Never your card or bank details.
- Anonymous donors: no name or contact details.
- Named donors: the name you want shown on the board, and optionally your email address or cellphone number.
- Section 18A receipts only: your full name or registered business name, income tax reference number and address, as SARS requires, and the date you agreed to us keeping them.
- Your browser: this site saves a random key in your browser's storage so it can show your pledges when you come back. Our database keeps only a scrambled (hashed) copy of that key, linked to the pledges made from your browser. It contains no personal details.
- Treasurers: treasurers sign in with their Google account. The email address they sign in with is recorded against the pledges and payments they enter, together with any proof of payment they upload.
Your card and bank details
You enter these on our payment provider's secure page. They never reach the trust or this website.
Why we use it
- To issue your plot certificate and, if requested, your Section 18A receipt.
- To contact you about your donation.
- To report donations to SARS (IT3(d)), as the Income Tax Act requires for 18A receipts.
We don't use it for marketing and don't sell it. Your contact details and tax number are never shown publicly. Only the name you choose appears on the board.
Who we share it with
- SARS, for Section 18A reporting.
- Our payment provider, to process your payment.
- Microsoft Azure, which hosts the site and its database.
- Google, for treasurer sign-in only.
Services your browser contacts
Our pages load fonts from Google Fonts, and the home page loads code libraries from cdnjs (Cloudflare) and unpkg. As with any web request, these services receive your IP address and browser details. They receive none of the details you type into this site.
Where it is kept, and for how long
- The site and its database are hosted on Microsoft Azure in South Africa (South Africa North region).
- We keep your information only for the purposes above, until the fundraising campaign ends. When it ends, all digital records of donations and donors, including contact details, tax numbers and proofs of payment, will be deleted.
Your rights
You may ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it, unless the law requires us to keep it. You may also object to how we use it. Email with your payment reference.
Complaints
If you're unhappy with how we've handled your information, contact us first. You can also complain to the Information Regulator (South Africa):
- Website: inforegulator.org.za
- Complaints: POPIAComplaints@inforegulator.org.za
- Enquiries: enquiries@inforegulator.org.za · 010 023 5200
- Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191