POPIA Notice

Last updated 10 August 2026

This notice explains how Comunita processes personal information in line with South Africa's Protection of Personal Information Act, 4 of 2013 (POPIA). It sits alongside our Privacy Policy and describes how the platform works today.

1. Responsible party and Information Officer

Comunita operates the platform used by clubs to manage their communities. For information processed on the platform itself, Comunita is the responsible party. Where a club decides what to collect from its own members and how to communicate with them, that club is the responsible party and Comunita acts as its operator.

Information Officer: info@comunita.co.za. Support: support@comunita.co.za.

2. Personal information we process

Registration and profile details (name, email address, mobile number, date of birth, gender, city), emergency contact details, fitness level and activities of interest, and how you heard about your club.

Participation data: event RSVPs, attendance check-ins, points, badges and challenge progress, feed posts, messages to club administrators, and any photos you upload.

Activity data: recorded or imported sessions including distance, duration, pace, elevation and GPS route points where you choose to record or upload them.

3. Why we process it (purpose and lawful basis)

We process personal information to create and secure your account, run club membership and events, verify attendance, calculate rewards and leaderboards, send service notifications, and keep the platform safe and working. This is necessary to provide the service you or your club asked for, and to pursue the legitimate interests of running a club.

Some processing relies on your consent, which you may withdraw at any time: uploading a profile photo, publishing activities and photos to the club feed, indemnity and media consent captured at registration, and optional notification preferences.

4. Activity visibility and GPS routes

Activities are private by default. If you set an activity to club visibility, other members of your club can see its details and full route map, including the start and finish points — which may be your home. You can change an activity's visibility or delete it at any time.

5. Sharing and cross-border processing

Personal information is shared with your club's administrators so they can manage membership, events and attendance. We use service providers for hosting, database, storage and email delivery. Some of these providers process and store data on servers located outside South Africa, and they are bound by contractual terms requiring an adequate level of protection. We do not sell personal information.

6. Security safeguards

Access to data is controlled at database level so members only see their own information and the club data they are entitled to. Traffic is encrypted in transit, sign-in uses one-time codes rather than stored passwords, and administrative functions are restricted by role. No system can be guaranteed completely secure, so please report anything suspicious to us promptly.

7. Retention

We keep your personal information while your account is active and your club membership continues. If you delete your account, your profile, activities and uploads are removed. Limited records may be retained where a law requires it, or in aggregate form that no longer identifies you.

8. Your rights under POPIA

You have the right to be told what personal information we hold about you, to ask that it be corrected or deleted, to object to processing in certain circumstances, to withdraw consent you previously gave, and to lodge a complaint. Much of this you can do yourself in Account settings; for anything else, contact your club administrator or email info@comunita.co.za. See the Contact page for all routes to reach us.

9. Complaints to the Information Regulator

If you are not satisfied with how we have handled your personal information, you may complain to the Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg, or by email to their complaints address published on their website. We would appreciate the chance to resolve the matter with you first.

10. Clubs using Comunita

Each club decides what it asks of its own members and how it communicates with them. Clubs are responsible for their own notices, consents and member communications. Comunita provides the tools and the safeguards described above.

This page is maintained by the Comunita team and describes how the platform works today. It is not a certification or independent audit. Individual clubs using Comunita are responsible for their own member communications and data-handling practices.