Privacy Policy: Three Sisters Journey

Last Updated: March 2026

1. Introduction

Three Sisters Journey (“we,” “us,” or “our”), operating from Dan Pienaar, Bloemfontein, 9301, is committed to protecting the privacy and personal information of our participants. This policy explains how we process your data in accordance with the South African Protection of Personal Information Act (POPIA).

2. Information We Collect

We aim to limit data collection to only what is strictly necessary to facilitate our fundraising auction. We collect:

• Identity Information: Full Name and Surname.
• Contact Information: Email address and Mobile/Telephone number.
• Location Information: Physical residential address (required for logistics and audit records).
• Note on ID Numbers: We do not collect, store, or require your National Identity Number for this auction.

3. Purpose of Processing

We process your personal information for the following specific, lawful reasons:

• Auction Participation: To verify your registration and allow you to place bids.
• Communication: To notify you if you have won an item and to coordinate payment.
• Logistics: To facilitate the collection of won items in the Bloemfontein area or to arrange courier services.
• Audit Compliance: To maintain a “Vendor’s Roll” and “Bidders’ Record” as required for transparent charitable fundraising.

4. Lawful Basis for Processing

We process your information based on:

• Contractual Necessity: To fulfill the agreement between Three Sisters Journey and you as a bidder.
• Legitimate Interest: To ensure the security of the auction and prevent “ghost bidding” or fraudulent activity.
• Legal Obligation: To comply with South African tax and fundraising transparency standards.

5. Data Security

As an organization based in Dan Pienaar, Bloemfontein, we take reasonable technical measures to protect your data, including:

• Using secure, encrypted website protocols (HTTPS/SSL).
• Restricting access to your contact details to only the essential organizers of the Three Sisters Journey.
• Ensuring our web hosting environment meets industry security standards.

6. Sharing of Information

We do not sell, rent, or trade your personal information. Your data is only shared with:

• Payment Providers: Third-party gateways (e.g., PayFast or your bank) to process transactions.
• Logistics Partners: Courier companies, only if you request delivery.
• Authorities: Only if we are legally compelled to do so by South African law.

7. Data Retention

We retain your personal information only for as long as is necessary to finalize the auction and fulfill our audit requirements for the fundraiser (typically 3 years), after which your data will be securely deleted.

8. Your Rights

Under POPIA, you have the right to:

1. Request a copy of the personal information we hold about you.
2. Request that we update or correct your information.
3. Request that we delete your information (subject to our legal retention obligations).
4. Lodge a complaint with the Information Regulator (South Africa) at enquiries@inforegulator.org.za.

9. Contact Us

For any questions regarding your data, please contact: Three Sisters Journey Dan Pienaar, Bloemfontein, 9301