Privacy
What we collect,
and what we do
with it.
Written to the Protection of Personal Information Act. Plain language, because a notice nobody can read protects nobody.
1. Who is responsible for your information
Amalang' Amahle Holdings (Pty) Ltd (registration number 2015/108803/07) is the responsible party for the personal information described in this notice. We are referred to below as “we”, “us” and “our”.
Information Officer. The Act requires us to name the person accountable for compliance and to register them with the Information Regulator. That registration is in progress, and the name and contact details will be published here on completion. Until then, every request under this notice reaches us at the address below and is dealt with the same way.
How to reach us about anything in this notice: Carolinet@amalangamahle.com, or WhatsApp 067 427 1776, Monday to Friday 08:30 – 16:30.
2. What we collect, and why
If you enter the competition
| What | Why | Required? |
|---|---|---|
| Your full name | To identify your entry and announce you if you win | Yes |
| Your mobile number | To contact you if you win, and to find your entry if you lose your reference | Yes |
| Your area or suburb | To report which communities the competition is reaching | No |
| Your email address | To send your entry confirmation, if you want one | No |
| Your confirmation that you are 18 or older, and that you accept the rules | Evidence of consent, which the law requires us to keep | Yes |
| Your payment reference and amount | To confirm your entry is paid and to reconcile the money | Yes |
| Your answer to a skill question | Only if the competition is run as a skill competition. Kept as the record of your answer | No |
We do not ask for your identity number, your home address, or any banking details. We never will. Anyone asking you for those in our name is not us.
If you contact us through this website
The enquiry form collects your name, your email address, and whatever you write in the message. We use it to answer you and nothing else.
If you administer the competition
Administrator accounts store an email address, the Google account used to sign in, and a record of every action taken — including every time entrant details are viewed or exported, by whom, and how many records were involved. That log exists to protect entrants.
Automatically, when you use the site
Our servers record the IP address of requests to the entry and lookup pages. This is used to limit how many times the same source can submit, which is what stops automated abuse. It is not used to identify you and not combined with anything else.
We do not use analytics, advertising or tracking cookies.There is no Google Analytics, no advertising pixel, and no third-party tracker on any page. The only cookies we set are the session cookies that keep an administrator signed in, which are strictly necessary and expire when the session ends.
3. On what basis we process it
- Your consent — for entering the competition. You give it by ticking the boxes on the entry form, we record which version of the terms you agreed to, and you may withdraw it at any time by contacting us. Withdrawing consent after the draw does not undo a draw that has already happened.
- Performance of an agreement — once you have paid to enter, we have to process your details to run the competition and to pay out a prize.
- Our legitimate interests — keeping records that show the competition was run fairly, preventing fraud and abuse, and securing the system.
- Legal obligation — where we are required to keep financial or competition records.
4. Who else sees it
We do not sell your information. We do not share it with sponsors for their own marketing. It is shared only with the service providers below, who process it on our instructions and may not use it for anything else.
| Who | What for | Where |
|---|---|---|
| Supabase | The database holding entries | European Union |
| xneelo | Website and server hosting | South Africa |
| Administrator sign-in only — never entrant data | Global | |
| Web3Forms | Delivering website enquiry forms | Outside South Africa |
| Cloudflare | Encrypted off-site backups | European Union |
| MTN | Processing entry payments | South Africa |
| Brevo | Sending entry confirmations | European Union |
Cloudflare, MTN and Brevo are listed because the system is built to use them. Backups, payments and confirmation messages are not switched on yet; this notice will not change when they are, which is why they are named now rather than added quietly later.
Winners are announced publicly
If you win, your first name, surname initial and area will be announced live on Alex FM and may be published by us and our partners. Your full mobile number is never broadcast. If you would rather not be named publicly, tell us when we contact you and we will discuss alternatives — but we may still have to confirm publicly that a valid entry won, because a draw nobody can check is a draw nobody trusts.
5. Information leaving South Africa
Our database and backups are stored in the European Union. No provider of the kind of database this system needs currently offers a South African region, and building one ourselves would be less secure, not more.
Section 72 of the Act permits transferring personal information outside South Africa where the receiving country has laws providing a comparable level of protection. The European Union’s General Data Protection Regulation meets that standard. Your information is encrypted in transit and at rest, and our backups are separately encrypted with a key that our storage provider does not hold.
6. How long we keep it
12 months after the competition is drawn, entrant names, mobile numbers, email addresses and areas are permanently erased by an automatic process. It does not wait for anyone to remember.
What remains afterwards is the anonymous shape of the competition — how many entries there were, what was paid, which numbers won — with nothing that identifies a person. That is kept so a past draw can still be shown to have been run fairly.
Enquiries sent through the contact form are kept only as long as needed to deal with the enquiry and any follow-up.
7. How we protect it
- We collect the minimum. Information we do not hold cannot be exposed.
- Administrator accounts require a second factor in addition to a password, and access is restricted to a specific list of approved people.
- Entrant names and numbers are hidden by default even from administrators. Revealing them is a deliberate act that is recorded against the person who did it.
- Every export of entrant details is recorded, with who did it and how many records it contained.
- Entry records cannot be edited or deleted after a draw, so results cannot be quietly rewritten.
- The database refuses to release entrant information to anyone who is not an authorised administrator, as a rule inside the database itself rather than a rule in our software.
- Backups are encrypted before they leave our systems and are regularly tested by restoring them.
No system is perfectly secure, and we will not claim otherwise. If a breach occurs that creates a real risk to you, we will notify you and the Information Regulator as the Act requires.
8. Your rights
You may, at any time and free of charge:
- Ask what personal information we hold about you
- Ask us to correct anything that is wrong
- Ask us to delete it, subject to records we are required to keep
- Object to us processing it
- Withdraw your consent
- Complain to us, or to the Information Regulator
To exercise any of these, contact us on Carolinet@amalangamahle.com. We will respond within a reasonable time and will not charge you for asking.
If you are not satisfied with our response, you may complain to the Information Regulator (South Africa) — inforegulator.org.za.
9. Children
You must be 18 or older to enter the competition. We do not knowingly collect information about children. If you believe we have, tell us and we will delete it.
10. Changes
If we change this notice we will update the version and date at the top. Where a change materially affects entrants, we will record the new version against future entries so it is always clear which terms a person agreed to.
Questions about any of this go to Carolinet@amalangamahle.com. We would rather answer than have you wonder.