LEGAL POLICY
Privacy and POPIA Notice
This policy describes personal information processed by the directory and the choices available to data subjects.
Operator and contact
Randpark Ridge Local is operated by Perch Digital Systems (Pty) Ltd, company registration 2026/760313/07.
Operator location: Randpark Ridge, Randburg, 2169, South Africa. Public contact: support@randparkridge.com. Privacy and data requests: support@randparkridge.com.
Information Officer: Gavin Perch. Officer contact: support@randparkridge.com.
Responsible party and scope
The responsible party and contact details are set out in the operator section below.
Information collected
Account registration provides email, name and optional phone details to Supabase authentication and the private profile. Owners provide business identity, service area, public contact fields, listing copy and media. The service also creates moderation, ownership, audit, email-delivery, subscription and payment metadata. Card details are handled by Paystack and are not collected by the application.
Public information
Approved business names, descriptions, service areas, trading hours, media and owner-authorised contact methods can become public only while publication eligibility is current. Private owner profiles, payment evidence and moderation notes are not public.
Purposes and justification
Information is used to operate accounts, verify ownership, moderate and publish listings, administer subscriptions and complimentary grants, send transactional email, protect the service, provide first-party Insights and retain necessary evidence. The operator records the justification for processing purposes in its processing inventory.
Analytics and technical information
A random identifier exists only in browser session storage. The server transforms it with HMAC before storing detailed first-party profile-view and contact-click events. Raw identifiers, raw IP addresses, full user-agent strings and advertising identifiers are not stored for Insights. Deduplication, abuse controls and daily aggregation limit repeated events.
Recipients and cross-border processing
Supabase provides database, authentication and storage; Vercel provides hosting; Paystack processes subscription payments; Resend sends transactional email. These providers may process information outside South Africa. Contact support@randparkridge.com for information about processor locations, safeguards and subprocessors.
Retention and deletion
Detailed Insights events are configured for 90 days; daily aggregates may be retained longer. Listing revisions, acceptances, payment and audit evidence are retained to preserve operational and legal history. Private rejected or abandoned media follows configured cleanup jobs. Retention of accounts, email records, aggregates, source media and legal evidence follows the operator’s retention schedule. Deletion requests are reviewed for identity, dependencies and lawful retention duties.
Security
The service uses authenticated access, row-level database controls, private source-media storage, server-side payment verification, audit records and metadata removal from processed images. No system can promise absolute security.
Your rights and complaints
Subject to applicable law, a person may request access, correction or deletion, object to processing, ask for processing information, or raise a complaint. The directory will not automate destructive deletion before identity and dependency review. See the data-request page. Complaints may also be taken to South Africa’s Information Regulator using its official channels.
Children and automated decisions
Owner accounts are not intended for children. The application does not use solely automated decision-making to approve or reject listings; administrators review submitted revisions.