Please note: This policy is a thorough starting template written for a South African platform under POPIA. Before you publish it, have it reviewed by a qualified attorney, and replace every [highlighted placeholder] with your real details (legal name, contact email, address, effective date).
The short version
We collect the info you give us (your profile, business listing, messages) plus some technical info, to run the directory and community.
Your location is only used if you switch it on, mostly to sort things by distance — and where possible it stays on your device.
Vibe check-ins and the singles meter are anonymous and only ever shown as group totals, never as individuals.
We never sell your personal information.
Payments are handled by trusted South African processors — we don't store your card details.
Under POPIA you can access, correct or delete your information at any time.
Black-Owned CPT (“we”, “us”, “our”) is a directory and community platform that helps people discover and support Black-owned and other POC-owned businesses across Cape Town, South Africa. This platform is operated by [your legal entity / trading name][, registration number if registered].
This Privacy Policy explains what personal information we collect, why, how we use and protect it, and the rights you have. It is read together with our Terms of Service. We process personal information in line with the Protection of Personal Information Act, 2013 (“POPIA”).
2. Information we collect
Information you give us
Account details — your name, email address and password when you create a profile.
Profile information — anything you choose to add, such as a photo, interests, or saved favourites.
Business listings — if you list a business: business name, description, category, address, contact details, social links, logo or photos, and the tags you select.
Events & hosting — event details you post, and host profile information if you become a community host.
Messages — the content of messages you send to businesses or other users through the platform.
Communications — emails, WhatsApp messages or other correspondence you send us.
Information we collect automatically
Device & usage data — your browser type, device, approximate region inferred from your IP address, pages viewed and actions taken.
Local storage — small pieces of data saved in your browser to remember preferences (for example whether you have switched the vibe meter off).
Location — only if you turn it on (see section 4).
Information from others
We may receive limited information from payment processors (confirmation that a payment succeeded) and from analytics or service providers that help us run the platform.
3. How we use your information
To create and manage your account and business listing.
To show businesses, events and listings in search and on the map.
To let you message businesses and other users, and to deliver event tickets and confirmations.
To show anonymous, aggregated “vibe” and crowd information (see section 5).
To improve and secure the platform, and to prevent fraud and abuse.
To respond to your questions and send you service-related updates.
To comply with our legal obligations.
We rely on your consent, the performance of our agreement with you, our legitimate interests in running the platform, and our legal obligations as the lawful bases for processing.
4. Location data
Location features are always opt-in. When you tap a “near me” or “use my location” control, your browser asks for permission. We use your location to sort businesses, events and venues by distance from you. Where a feature can work entirely in your browser, your precise location stays on your device and is not sent to us. You can switch location access off at any time in your browser settings.
5. Vibe & check-in features
Our vibe meters, crowd levels and the “singles meter” are designed to protect privacy:
Check-ins are anonymous — we show how busy a place is, not who is there.
The singles meter is opt-in and anonymous, and is only ever displayed as a rounded group total (for example “10+ checked in”), never as individuals, and never when too few people have opted in.
You are never required to join the singles meter to use the platform.
6. Cookies & local storage
We use essential local storage and, where applicable, cookies to keep you signed in, remember your preferences and keep the platform secure. Some third-party services we use (such as maps, fonts and payment processors) may set their own cookies. You can clear or block storage in your browser, though some features may stop working as a result.
7. When we share information
We do not sell your personal information. We share it only as follows:
With businesses and other users — when you message a business or post public content (such as a review or a business listing), the relevant information is visible to them or to the public.
With service providers — hosting, analytics, email delivery, maps and similar providers who process data on our behalf under appropriate safeguards.
With payment processors — to take payment for tickets and bookings (see section 8).
For legal reasons — where required by law, regulation or valid legal process, or to protect the rights and safety of our users and the public.
In a business transfer — if the platform is merged, acquired or restructured, with continued protection of your information.
8. Payments
Ticket and booking payments are handled by third-party South African payment processors such as Payfast, Yoco or SnapScan. When you pay, your card or banking details are entered with the processor, not stored by us. Those processors have their own privacy policies, and we receive only confirmation of the transaction and the information needed to issue your ticket or booking.
9. How long we keep your data
We keep personal information only for as long as needed for the purposes described here, to comply with our legal obligations, resolve disputes and enforce our agreements. When you delete your account, we delete or anonymise your personal information unless we are required to keep it for a lawful reason.
10. Security
We take reasonable technical and organisational measures to protect your information against loss, misuse and unauthorised access. No online service can be completely secure, so we cannot guarantee absolute security, but we work to safeguard your data and will notify you and the relevant authority of a serious data breach as POPIA requires.
11. Your rights under POPIA
Subject to the law, you have the right to:
Ask what personal information we hold about you and request a copy.
Ask us to correct information that is inaccurate or incomplete.
Ask us to delete or destroy your information where we no longer have a lawful reason to keep it.
Object to certain processing, and withdraw consent you have given.
Lodge a complaint with the Information Regulator of South Africa.
To exercise any of these rights, contact us using the details in section 15.
12. Age restriction
Black-Owned CPT is intended for people aged 18 and over, as it includes nightlife, alcohol-related and social “mingling” features. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us their information, please contact us and we will remove it.
13. Visitors from abroad
We welcome tourists and visitors. If you access the platform from outside South Africa, your information will be processed in South Africa and, where relevant, by service providers in other countries. Where we transfer personal information across borders, we take steps to ensure it remains protected.
14. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the “last updated” date and, where appropriate, let you know. Continuing to use the platform after a change means you accept the updated policy.
15. Contact & complaints
For any privacy question, or to exercise your rights, contact our Information Officer:
If you are not satisfied with how we handle your information, you may complain to the Information Regulator (South Africa), the body responsible for POPIA, via its official website.