Privacy policy
Last updated: [DATE]
This policy explains what personal information NewNest collects, why, and the rights you have under the South African Protection of Personal Information Act (POPIA) and the EU General Data Protection Regulation (GDPR).
Who is responsible
The responsible party (controller) is [COMPANY NAME, REGISTRATION NUMBER, ADDRESS]. Our Information Officer is [NAME], reachable at [PRIVACY EMAIL].
What we collect
- Account details: email address, display name, username and a securely hashed password.
- Profile details you choose to add: city, district, languages, interests and notification preferences.
- Activity: events you reserve or mark as interesting, groups you join, messages and event chat posts, reviews, saved services and reports you make.
- Provider details: for providers, the business information submitted for verification and shown on the public profile.
- Technical data: a session cookie that keeps you signed in, and server logs containing IP addresses, used for security and rate limiting.
- Payments: handled by our payment provider; we receive payment status, not your card details.
Why we use it
- To run your account and the service you asked for (contract).
- To verify providers, moderate the community and keep events safe (legitimate interest).
- To send emails you need, such as address verification, password resets and event updates, and optional notifications you can switch off (contract and consent).
- To meet legal obligations.
We do not sell personal information and do not use it for third-party advertising.
Who we share it with
Other members see what you make public, such as your display name, reviews and messages in groups or event chats you join. We use service providers (operators) for hosting, email delivery, error reporting and payments, under contracts that require them to protect your data: [LIST PROVIDERS AND COUNTRIES]. Where data leaves South Africa or the EU, we rely on adequate protection or appropriate safeguards.
How long we keep it
We keep your account data while your account exists. Sessions expire after 30 days; server logs are kept for 30 days. Event chats are closed one hour after an event ends. [ADD ANY OTHER RETENTION PERIODS]
Cookies
We use one strictly necessary cookie to keep you signed in. We use no tracking or advertising cookies.
Your rights
You may access, correct or delete your personal information, object to or restrict its processing, and receive a copy of it. In the app you can download your data and delete your account from your profile page. Deleting your account removes your profile, reviews and interests; your messages are hidden and your name is replaced with "Deleted user". For anything else, write to [PRIVACY EMAIL].
You may also complain to the Information Regulator of South Africa (inforegulator.org.za) or, in the EU, to your local data protection authority.
Security
Connections are encrypted with HTTPS, passwords are stored as one-way hashes, and the session cookie cannot be read by scripts. No system is perfectly secure; we will notify you and the regulator of a breach as the law requires.
Children
NewNest is for people aged [18] and over.
Changes
If we change this policy in a meaningful way, we'll tell members by email before the change takes effect.