Mpumalanga Heritage
Privacy Policy
Mpumalanga Heritage — Privacy Policy
Effective date: July 2nd 2026
Mpumalanga Heritage ("MH", "we", "our", "us") is committed to protecting your privacy and to handling your personal information responsibly, in line with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African law. This policy explains what personal information we collect, why we collect it, how we look after it, and the rights you have.
1. Who we are
Mpumalanga Heritage is a volunteer heritage organisation and registered Non-Profit Organisation (NPO 126-240), affiliated with the Heritage Association of South Africa (HASA). For the purposes of POPIA, we are the "responsible party" for the personal information described in this policy. Our Information Officer is [name / role — see note below], who can be reached at MpumalangaHeritage@gmail.com.
2. Information we collect
When you apply for membership, subscribe to our mailing list, attend or enquire about our activities, or otherwise communicate with us, we may collect:
• Full name
• Contact details (email address, phone number, postal address)
• Family details (where you apply for family membership)
• Payment information (where needed for invoicing and receipts)
• Any additional information you choose to give us (for example, your particular heritage interests)
• Limited technical information collected automatically when you use our website (see section 9)
3. How we use your information
We use your personal information only for purposes connected to our heritage work and membership administration, including to:
• Process membership applications and renewals
• Issue invoices and receipts
• Communicate with you about events, meetings, projects and news
• Send you our newsletter and event updates, where you have asked to receive them
• Maintain accurate membership records
• Comply with our legal and regulatory obligations
We rely on your consent and on our legitimate interests as a membership organisation to process your information for these purposes. We do not sell, rent or trade your personal information.
4. Newsletter and direct marketing
We will only send you our newsletter and marketing-type communications where you have given us your consent (for example, by ticking the subscribe option on our sign-up form). You may withdraw your consent and unsubscribe at any time, at no cost, by contacting us at the address in section 11 or by using the unsubscribe link in our emails.
5. Storage and security
We store personal information securely, on password-protected systems and/or in locked physical files. Access is limited to committee members or administrators who need it to carry out their duties. We take reasonable technical and organisational steps to protect your information against loss, unauthorised access or misuse. If a security breach affects your personal information, we will notify you and the Information Regulator as required by POPIA.
6. Sharing your information
We share personal information only:
• With service providers ("operators") who help us with administrative tasks — for example accountants, our website provider and our email/newsletter platform — and only to the extent needed to provide those services; and
• Where we are legally required or permitted to do so.
We require operators who process personal information on our behalf to keep it secure and to use it only for the agreed purpose.
7. Information processed outside South Africa
Some of our service providers (for example our website host and email/newsletter platform) may store or process personal information on servers outside South Africa. Where this happens, we take reasonable steps to ensure your information continues to receive an adequate level of protection, as required by POPIA.
8. Children's information
We do not knowingly collect personal information about children (persons under 18) except as part of a family membership, and then only with the consent of a parent or guardian. If you believe we hold a child's information without the necessary consent, please contact us and we will address it.
9. Our website and cookies
Our website may use cookies and similar technologies to help it function and to understand how visitors use it. You can control or disable cookies through your browser settings, although some features may not work as well as a result.
10. Your rights under POPIA
You have the right to:
• Ask what personal information we hold about you and request access to it
• Ask us to correct or update information that is inaccurate or out of date
• Object, on reasonable grounds, to our processing of your personal information
• Ask us to delete information we no longer have a lawful reason to keep
• Withdraw your consent to receive communications from us at any time
• Lodge a complaint with the Information Regulator (see section 12)
Requests can be made in writing to MpumalangaHeritage@gmail.com. We will not charge you for making an objection.
11. Data retention
We keep personal information only for as long as it is needed for membership administration, financial record-keeping or legal purposes. When it is no longer required, we securely delete or destroy it.
12. Complaints to the Information Regulator
If you are unhappy with how we have handled your personal information, we ask that you contact us first so we can try to put things right. You also have the right to complain to the Information Regulator:
The Information Regulator (South Africa)
Email (POPIA complaints): POPIAComplaints@inforegulator.org.za
Website: inforegulator.org.za
13. Updates to this policy
We may update this policy from time to time to reflect changes in the law or in our practices. The current version will always be available on our website or on request.
14. Contact us
For any questions, concerns or requests about this policy or your personal information:
Mpumalanga Heritage
Email: MpumalangaHeritage@gmail.com