Privacy Policy

Last updated: September 2026

The Dullstroom Community Centre is run by the Mackenzie Foundation Trust, a registered Public Benefit Organisation (PBO 130 002 965). This policy explains what happens to personal information in connection with this website, under the Protection of Personal Information Act 4 of 2013 (POPIA).

The short version: this site has no accounts, no sign-up forms and no shopping basket. We do not ask you for personal information, and we do not sell or share what little we do receive.

What we collect

Nothing, unless you contact us. There is no contact form, no newsletter sign-up and no login for visitors. If you email or phone us using the details on our contact page, we receive whatever you choose to tell us: your name, your email address or phone number, and the content of your message.

Website statistics. We use Cloudflare Web Analytics to understand roughly how many people visit and which pages they read. It is privacy-first and cookieless: it sets no cookies, does not fingerprint your device, and does not track you across other websites. We see aggregate counts, never individuals.

Donations. Donations reach us by bank transfer. Your payment is handled entirely by your own bank, and we never see your card or banking credentials. If you send proof of payment so that we can issue a Section 18A tax certificate, we receive your name, contact details and the information SARS requires us to record for that certificate.

Cookies and embedded content

We set no cookies of our own on any public page.

Our news page embeds posts from Facebook. When one of those embeds loads, Facebook may set its own cookies and receive your IP address, exactly as if you had visited Facebook directly. That processing is governed by Facebook’s privacy policy, not ours. The embeds load only when you scroll to them, so if you do not reach that part of the page, nothing is requested from Facebook.

Why we may process your information

Where we hold personal information, it is on one of these bases: because you contacted us and we are replying; because we have a legal obligation, such as the records SARS requires for Section 18A certificates; or because we have a legitimate interest in keeping the centre running and thanking the people who support it.

Who we share it with

We do not sell personal information, and we do not share it for marketing.

Two service providers necessarily process data on our behalf: Cloudflare, which hosts this website and provides the analytics described above, and Google, which provides our email. Both operate outside South Africa, so information may be processed abroad under POPIA’s rules on cross-border transfers. We may also disclose information where the law requires it.

How long we keep it

We are a small organisation and we keep things simply. Correspondence may be held for as long as it is useful to us, and some of it is printed and filed. Records supporting Section 18A certificates are kept for the period SARS requires. Website statistics are aggregate and hold nothing that identifies you.

If you would like us to delete something you have sent us, ask and we will.

Your rights

Under POPIA you may ask us what personal information we hold about you, ask us to correct or delete it, object to our processing it, and complain if you believe we have handled it badly.

To do any of those, email angus@dullstroomcc.org or write to us at the address on our contact page.

Children

The centre works with children every day, and we take care with their images and stories. Photographs of children appear on this site only with the permission of a parent or guardian. If you are a parent or guardian and would like a photograph removed, email angus@dullstroomcc.org and we will take it down.

Changes

If this policy changes we will update it here and change the date at the top.