Privacy Policy

Last updated: . This policy explains how we collect, use, store and protect your personal information, and your rights under POPIA.

1. Who we are (Responsible Party)

[Bounce Galaxy / your registered business name] ("we", "us") is the responsible party for the processing of your personal information.

2. What personal information we collect

• Booking details — your name, phone number, email, event address (street, suburb, town), party date and the items you book.
• Account details (if you choose to register) — your name and email, managed by our identity provider (Keycloak).
• Technical data — basic information your browser sends (e.g. for security and to make the site work).

Creating an account is optional — you can book as a guest.

3. Why we process it (purpose & lawful basis)

• To take and fulfil your booking, calculate delivery, and contact you to confirm — this is necessary to perform our agreement with you.
• To manage your optional account and show your booking history.
• To keep records for legitimate business, accounting and tax obligations.

4. Who we share it with (Operators & third parties)

• Identity provider — Keycloak (hosted at auth.tovutihostings.work) for optional account login.
• Hosting — our website and database hosting provider.
• Address lookup — we use OpenStreetMap/Nominatim and OSRM to estimate delivery distance from the suburb/town you select. We send only the place name, not your full personal profile.

We do not sell your personal information. We do not run third-party advertising on this site.

5. Where it is stored & security

Your information is stored in our database and identity provider. We take reasonable technical and organisational measures to protect it against loss, unauthorised access or disclosure. Connections to the site and API use HTTPS.

6. How long we keep it (retention)

We keep booking records for as long as needed to provide our service and to meet legal, accounting and tax requirements. When you delete your account, we erase your personal details from bookings and keep only an anonymised transaction record where retention is legally required.

7. Your rights under POPIA

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct information that is inaccurate.
• Deletion / erasure — ask us to delete your personal information (see below).
• Objection — object to certain processing.
• Complaint — lodge a complaint with the Information Regulator (South Africa).

8. Deleting your account & data

If you have an account, you can delete it yourself: log in, open My Account, and click “Delete my account”. This erases your personal details (name, email, phone, address) from your bookings and deletes your login.

Prefer us to do it? Email [hello@bouncegalaxy.co.za] with the subject “POPIA deletion request” and we will action it.

9. Cookies & local storage

We use only what is needed for the site and login to function (for example, to keep you signed in during a session). We do not use advertising or cross-site tracking cookies.

10. Information Regulator

You may contact the Information Regulator (South Africa): inforegulator.org.za.

11. Changes to this policy

We may update this policy from time to time. The “last updated” date above shows the latest version.

This template is provided to help you get started and is not legal advice. Please have a qualified professional review it for your specific business.

← Back to Bounce Galaxy