Who we are
Umzumbe Surf Club("USC", "we") is a community-driven surf initiative based in Umzumbe, KwaZulu-Natal, South Africa. We are a registered Non-Profit Organisation (registration number: pending).
What information we collect
We collect information you give us directly: your name, email address, contact number, and donation amount when you donate. We collect payment data only as it transits to PayFast — we never store card numbers ourselves.
If you contact us via email, WhatsApp, or Instagram, we keep that correspondence for as long as necessary to handle your enquiry, and no longer than 24 months.
We do not run analytics, tracking pixels, or third-party advertising scripts on this site. We do not set cookies for tracking purposes.
Why we collect it (lawful basis)
- Donations: contract (to process your donation) and legitimate interest (to send a receipt, reconcile the spend against the campaign, issue Section 18A documentation).
- Surfer information:explicit signed consent from the surfer's parent or guardian — see our Safeguarding Policy.
- Contact enquiries: legitimate interest, held no longer than 24 months.
Who we share it with
We share your payment data with PayFast (our payment processor) for the sole purpose of processing your donation. We do not share your information with marketers, list brokers, or third parties for any commercial purpose.
Aggregate, non-identifying donation totals (e.g., "R45,000 raised") may be published on the site. Your name is never published unless you have explicitly opted in.
How long we keep it
- Donation records: 7 years (SARS financial record-keeping requirement).
- Contact enquiries: 24 months from last correspondence.
- Surfer profiles: per signed consent and renewal cycle. Removable on request within 7 days.
Your rights under POPIA
You have the right to: access your personal information; correct inaccurate information; request deletion; object to processing; and complain to the Information Regulator of South Africa.
To exercise any of these rights, email hello@umzumbesurfclub.com with the subject "POPIA request". We respond within 30 days.
Information Officer
Per POPIA, USC has assigned an Information Officer responsible for compliance. Contact details available on request.
Security and breaches
We use industry-standard security (HTTPS-only, encrypted database, no cardholder data on our servers). In the event of a material breach involving your information, we will notify you and the SA Information Regulator without undue delay, as required by POPIA Section 22.
Changes to this policy
We will publish any changes here and update the "last updated" date above. Material changes will be communicated by email to active donors.
Contact
Privacy questions: hello@umzumbesurfclub.com
SA Information Regulator: inforegulator.org.za