Privacy & POPIA Notice

We Love Magalies is the public tourism and community platform operated by the Magalies Business & Tourism Forum (MBTF). For personal information processed through this website, MBTF is the responsible party.

Privacy and information requests may be sent to info@welovemagalies.co.za. MBTF is based in Magaliesburg, Gauteng, South Africa.

We collect information that you choose to provide when you:

• send a tourism, business, event, or general contact request;
• subscribe to news or festival updates;
• apply for MBTF membership or a public business listing;
• submit an event proposal or festival vendor application;
• create or access an approved member workspace account; or
• make or verify a payment through an enabled payment flow.

Depending on the action, this may include your name, email address, telephone number, organisation and role, business registration or listing information, physical or operating address, event and venue information, application answers, communication history, consent choices, and payment reference or status.

We also process limited technical and security information such as timestamps, IP-derived request data, browser or device details, error diagnostics, rate-limit records, and authentication status. We do not ask you to submit card details directly to We Love Magalies.

We process personal information to:

• answer enquiries and provide requested tourism or business information;
• review membership, listing, event, and vendor applications;
• publish approved public business or event information;
• administer member access, billing, records, and support;
• send updates that you expressly requested;
• protect the website against abuse, fraud, and security incidents;
• diagnose service failures and maintain reliable operations; and
• meet applicable legal, accounting, governance, or regulatory duties.

Our grounds for processing depend on the context and may include your consent, steps requested before entering an agreement, performance of an agreement, legitimate operational interests, or a legal obligation.

Fields marked as required are needed to assess or respond to the relevant request. If you do not provide them, we may be unable to process the submission. Optional details help MBTF understand and respond to your request but are not required.

Newsletter and promotional communication choices are separate from operational messages about an enquiry, application, account, event, listing, or payment.

Business and event information is published only after review and only where the submission is intended for public promotion. Personal contact details that are not approved for publication remain part of the administrative record.

We use specialised providers to operate the platform, including:

• Convex for application data, server functions, and authentication services;
• Vercel for website hosting and delivery;
• Cloudflare Turnstile for automated-abuse protection;
• Postmark for enabled transactional email delivery;
• Sentry for enabled error monitoring and diagnostics; and
• Paystack for enabled payment initiation and verification.

These providers process information only for the services they provide to MBTF. We may also disclose information where required by law, to protect legal rights, or with your direction. We do not sell personal information.

Some technology providers may store or process information outside South Africa. Where that occurs, MBTF uses providers and contractual arrangements intended to provide protections that are substantially similar to the safeguards required by POPIA, or relies on another lawful basis for the transfer.

We retain information only for as long as it is reasonably needed for the purpose for which it was collected, to maintain an accurate application or transaction record, to resolve disputes, to protect the service, or to comply with legal and governance duties. When information is no longer required, it is deleted, de-identified, or securely archived where continued retention is legally required.

The platform uses role-based access controls, protected server routes, request-size limits, rate limiting, bot protection, encrypted transport, provider access controls, monitoring, and separated payment handling.

If a security compromise creates a material risk to affected people, MBTF will investigate and make notifications required by POPIA.

You may ask MBTF to:

• confirm whether we hold personal information about you;
• provide access to that information, subject to lawful limitations;
• correct information that is inaccurate, incomplete, or outdated;
• delete or destroy information that we are no longer authorised to retain;
• record an objection to specified processing; or
• stop direct marketing and withdraw a consent you previously gave.

We may need to verify your identity before acting on a request. Withdrawing consent does not invalidate processing that was lawful before the withdrawal.

Contact MBTF first at info@welovemagalies.co.zaso that we can investigate and respond.

You may also contact or lodge a complaint with the Information Regulator (South Africa). Official objection, correction, deletion, and complaint forms are available on the Regulator's website.

We may update this notice when the public services, providers, or legal requirements change. The current version and its revision date will remain available on this page.