Privacy Policy

Last updated: 14 July 2026

1. Introduction

The Blairgowrie Community Association respects the privacy of residents, donors and website visitors.

This Privacy Policy explains how we collect, use, store and disclose personal information through the Blairgowrie Public Pool fundraising website.

The BCA processes personal information in accordance with applicable South African law, including the Protection of Personal Information Act 4 of 2013, commonly known as POPIA. POPIA establishes conditions for the lawful processing of personal information by public and private bodies.

2. Responsible party

The responsible party for personal information processed through this website is:

Blairgowrie Community Association
Website: pool.iamblairgowrie.co.za
Email: info@myblairgowrie.co.za
Physical address:2 Conrad Dr, Blairgowrie

Information Officer: Harold Fleishman
Information Officer email: harold@myblairgowrie.co.za

3. Personal information we may collect

Depending on how you use the website, we may collect:

full name;
email address;
telephone number;
billing address;
postal code;
donation amount;
payment status;
order and transaction references;
date and time of the donation;
correspondence sent to the BCA;
IP address;
browser, device and operating-system information;
website activity and cookie information;
information required to investigate a refund, dispute or suspected fraud.

We do not intentionally collect complete card details through the BCA website. Payment information is processed by the payment provider. PayFast separately collects information required to process payments and administer its services.

4. How we collect information

We may collect personal information:

when you make a donation;
when you complete the WooCommerce checkout form;
when you contact us;
when you request a refund;
when you subscribe to communications, where offered;
automatically through cookies, security tools, server logs and website analytics;
from payment providers when they confirm or report a transaction.

5. Why we use personal information

We may use personal information to:

process and record donations;
issue donation and payment confirmations;
communicate with donors;
provide customer support;
process refund requests;
maintain financial and project records;
prevent fraud and protect the website;
comply with legal, accounting and regulatory obligations;
prepare aggregated fundraising and project reports;
improve the website and donation process;
send community or fundraising communications where the recipient has consented or where otherwise permitted by law.

We will not automatically add a donor to a marketing or newsletter list merely because they made a donation, unless they have agreed to receive those communications or another lawful basis applies.

6. Lawful processing

We process personal information only where there is a lawful and legitimate reason to do so.

This may include:

performing the donation transaction requested by the donor;
complying with legal obligations;
protecting the legitimate interests of the BCA, donors and the website;
preventing fraud;
maintaining financial records;
obtaining consent where consent is required.

7. Payment information

Payments are processed through PayFast and may also involve banks, card networks and other payment-service providers.

The payment provider processes payment information under its own privacy policy and terms.

The BCA normally receives transaction information such as:

donor or payer details;
transaction reference;
payment amount;
payment method;
payment status.

The BCA does not normally receive or store the donor’s complete card number, security code or banking password.

8. Sharing personal information

We may share personal information with service providers that help us operate the website and fundraising system, including:

PayFast and related payment providers;
WooCommerce and WordPress service components;
website-hosting and security providers;
email-delivery providers;
accounting, audit or bookkeeping service providers;
professional advisers;
banks and financial institutions;
law-enforcement or regulatory authorities where required by law.

These parties may only receive information reasonably necessary for the relevant service or legal purpose.

We do not sell donors’ personal information.

9. International processing

Some website, cloud, email, security or payment providers may process information outside South Africa.

Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the transfer is permitted under POPIA and that appropriate safeguards apply.

10. Cookies

The website may use essential cookies to:

maintain the WooCommerce cart and checkout session;
remember selected donation information;
provide security;
prevent fraud;
maintain website functionality.

With appropriate consent, the website may also use analytics or other optional cookies.

You may disable cookies in your browser, but essential parts of the donation and checkout process may then not work correctly.

11. Retention

We retain personal information only for as long as reasonably required for:

processing and recording donations;
financial, tax, audit and accounting requirements;
fraud prevention;
resolving disputes and refunds;
legal compliance;
legitimate project administration.

When information is no longer reasonably required, it may be deleted, anonymised or securely archived in accordance with applicable retention obligations.

12. Security

The BCA takes reasonable technical and organisational measures to protect personal information from:

loss;
misuse;
unauthorised access;
alteration;
disclosure;
destruction.

These measures may include access controls, secure hosting, encrypted connections, security software, restricted administrative access and reputable payment processors.

No internet-based system can be guaranteed to be completely secure. Donors should also protect their own devices, email accounts and passwords.

13. Security incidents

Where personal information is compromised, the BCA will assess and respond to the incident in accordance with applicable law.

Where required, the BCA will notify the Information Regulator and affected individuals.

14. Your rights

Subject to POPIA and other applicable law, you may have the right to:

ask whether we hold personal information about you;
request access to your personal information;
request correction of inaccurate information;
request deletion where the information is no longer lawfully required;
object to certain processing;
withdraw consent where processing is based on consent;
object to direct marketing;
lodge a complaint with the Information Regulator.

The Information Regulator accepts complaints concerning alleged unlawful processing of personal information.

Requests may be sent to:

info@myblairgowrie.co.za

We may need to verify your identity before releasing or changing personal information.

15. Children

The website is intended primarily for adults who are legally able to make payments.

Children should not submit personal information or make donations without the involvement and permission of a parent or legal guardian.

POPIA contains additional requirements governing the processing of children’s personal information.

16. Third-party websites

This website may link to external websites and services.

The BCA does not control the privacy practices of those third parties. Visitors should review the privacy policy of each external service they use.

17. Changes to this policy

We may update this Privacy Policy when our website, fundraising process, service providers or legal requirements change.

The revised policy will be published on this page with an updated effective date.

18. Contact and complaints

Privacy questions or requests may be sent to:

Blairgowrie Community Association
Email: info@myblairgowrie.co.za

You may also lodge a complaint with the South African Information Regulator where you believe your personal information has been processed unlawfully.