Stokvel Chommie
← Back to home

Privacy Policy

Draft version — last edited [date]
⚠️ This is a starting draft, not a finished legal document. Have a lawyer review this against South Africa's Protection of Personal Information Act (POPIA) before publishing it live — particularly the retention, third-party sharing, and data subject rights sections, which need to reflect exactly how your specific hosting setup handles data.

1. Who we are

Stokvel Chommie provides software (a WordPress plugin) that helps stokvel treasurers and members track contributions and payouts. This policy explains what personal information the plugin collects on a site where it's installed, and how it's used.

2. What we collect

  • Names and email addresses of treasurers and members
  • Contribution and payout records (amounts, dates, who paid/received what)
  • Login and confirmation activity (for the audit trail)
  • Basic technical data (IP address, browser type) for security and magic-link verification

We do not collect bank account numbers, card details, or process any payments — money moves directly between members, outside this software.

3. Why we collect it

  • To let the treasurer and members track who has paid and who is due a payout
  • To send magic-link sign-in emails to members
  • To maintain an audit trail of contributions, confirmations, and payouts
  • To send administrative notices about the plugin or service

4. Who can see it

Data for a given stokvel is visible to the treasurer and members of that specific stokvel group. It is not shared between different stokvel groups, and is not sold or shared with third parties for marketing purposes.

5. Where it's stored

Data is stored in the WordPress database of the site where the plugin is installed — the treasurer's own hosting (DIY), hosting we provide under a "Hosted" plan, or directly within stokvel.chommie.site's own database under "Stokvel Direct." [Specify your hosting provider and data centre location here once confirmed.]

6. How long we keep it

[Specify a retention period here — e.g. financial and audit records are kept for the life of the stokvel plus a defined period afterward, in line with any applicable record-keeping requirements. Confirm this with a lawyer/accountant.]

7. Your rights

Under POPIA, you have the right to access, correct, or request deletion of your personal information, subject to any legitimate record-keeping requirements (e.g. an ongoing stokvel's financial history). Contact us using the details below to make a request.

8. Security

We recommend (and configure, on paid setup plans) SSL/HTTPS site-wide, secure session cookies, and regular backups. No system is 100% secure, and this section should be updated to reflect the actual security measures in place on your specific hosting.

9. Contact

Questions about this policy or a request regarding your data: hello@stokvel.chommie.site or 084 878 5842.