Faith. Family. Fitness. Fun.
ONE FAMILY.|ONE COMMUNITY.|ONE MISSION.
LEGAL

Privacy Policy

This is a working draft aligned to the Protection of Personal Information Act, 2013 (POPIA), written from what this platform actually collects and does — not a template. Values marked [TBC] need Frederick's confirmation, and a South African attorney should review this before the site takes payments at scale.

WARPHX Nutrition (Pty) Ltd, registration 2026/043324/07 ("WARPHX", "we", "us"), operates the FAMREPS website and booking platform and organises the FAMREPS Inter-Class School Fitness Championship. This notice explains what personal information we collect, why, who we share it with, and the rights you have over it under POPIA.

1. Who is responsible for your information

WARPHX Nutrition (Pty) Ltd is the "responsible party" under POPIA. Our designated Information Officer is [Frederick, warphxnutrition@gmail.com — confirm this is who should be registered as Information Officer with the Information Regulator]. POPIA requires every responsible party's Information Officer to be registered with the Regulator before processing personal information; if that registration hasn't happened yet, it should be treated as outstanding.

2. What we collect, and where it comes from

The categories below match what this platform's forms actually capture — nothing is collected beyond what's listed here.

  • Contact and identity details — name, email, phone number, and (for individual entries) age band and shirt size, collected when you register, book, or express interest.
  • School or company details — school name, class/grade, job title, company name, industry, expected headcount, and an optional uploaded logo, collected through the school and corporate onboarding and booking forms.
  • Challenge Wall submissions — challenger and opponent names, class/team, a taunt message, and an optional logo. These are displayed publicly on the Challenge Wall once approved — do not include information you don't want shown publicly.
  • Payment information — processed directly by Paystack and Yoco. WARPHX does not receive or store your card number; we hold only the transaction reference, amount, and payment status.
  • NDA and sponsor records — signer identity, company, designation, a drawn or typed signature, and the IP address and browser (user agent) captured at the moment of signature, for sponsor proposal access and sponsor commitments.
  • Technical data — IP address and browser/device information, captured automatically on form submission for fraud prevention and abuse investigation, and anonymised view counts on the sponsor proposal page.
  • Email engagement — delivery, bounce, complaint and unsubscribe status for emails we send you, so we don't keep emailing an address that has opted out or is undeliverable.

3. Why we collect it, and our lawful basis

  • To process entries, school and corporate bookings, sponsorships, and payments — necessary to perform our contract with you once you register or book.
  • To follow up with schools and companies who start the onboarding process, whether or not they complete a booking — based on your consent, given explicitly at that step.
  • To communicate with entrants, parents/guardians, schools, companies and sponsors about the event.
  • To keep proof of signed NDAs and sponsor commitments, and to reconcile payments — necessary to meet our legal and financial record-keeping obligations.
  • To publicly display approved Challenge Wall submissions — based on your consent, given when you submit a challenge.

4. Who we share it with

We do not sell personal information. It is shared only with the service providers that make the platform work, each processing it only for the purpose stated:

  • Paystack and Yoco — receive what's needed to process your payment. Card details go directly to them; WARPHX never sees or stores them.
  • Supabase — our database, authentication and file storage provider. Our database is hosted in the EU (Ireland, eu-west-1) — personal information is therefore transferred outside South Africa to this hosting location as a normal part of running the platform.
  • Resend — sends transactional email (confirmations, receipts, notifications) on our behalf.
  • Vercel — hosts the website and application itself.

Payment processors and their underlying card networks may also process data outside South Africa as a standard part of international card payment rails.

5. How long we keep it

We keep personal information only for as long as needed for the purpose it was collected. As a guide: financial records connected to a payment (invoices, payment references, amounts) are kept for at least five years, in line with South African tax record-keeping requirements under the Tax Administration Act. School/corporate onboarding leads that don't convert to a booking, and Challenge Wall submissions, are kept for [a retention period Frederick should set — e.g. 12 months from last activity], after which they're deleted unless there's an ongoing reason to keep them. You can request correction or deletion at any time — see section 7.

6. Security

Personal information is stored behind row-level database security, so only authenticated, authorised requests can read it. Administrative access to the dashboard requires a role-checked login. Uploaded files are stored in private storage, accessible only via time-limited signed links, not public URLs. Card payment details never pass through or touch WARPHX's own systems.

7. Your rights under POPIA

You have the right to:

  • Be told what personal information we hold about you, and access it.
  • Have it corrected if it's inaccurate, out of date, incomplete, or misleading.
  • Ask us to delete or de-identify it, once we're no longer authorised to keep it.
  • Object to our processing of it, on reasonable grounds.
  • Withdraw consent at any time, where processing is based on consent (this doesn't affect processing already carried out).

To exercise any of these, email warphxnutrition@gmail.com.

8. Lodging a complaint

If you believe we've handled your personal information unlawfully, you can complain to us directly first (contact details above), or lodge a complaint with South Africa's Information Regulator:

9. Contact

WARPHX Nutrition (Pty) Ltd · Registration 2026/043324/07
Email: warphxnutrition@gmail.com
Phone: 072 331 2448 or 076 567 6652