Privacy policy
Draft — last updated 30 October 2026. Items in [square brackets] must be completed and the policy reviewed by a South African attorney before launch.
1. Who is responsible for your information
SA Baddies at sabaddies.co.za is operated by [OPERATOR NAME] (registration number [REGISTRATION NUMBER], [PHYSICAL ADDRESS]), the “responsible party” under the Protection of Personal Information Act, 2013 (POPIA). Our Information Officer is [INFORMATION OFFICER NAME], reachable at support@sabaddies.co.za.
This site is one of a small network of directory sites run by the same operator. They share one account system and one database of listings, forum posts and job adverts, so information you give on one site is held once and used across the network for the purposes below.
2. What we collect
Everyone
- Age confirmation cookie recording that you confirmed you are 18+.
- Saved favourites, stored in your own browser (local storage) unless you are a VIP member.
- Technical data: IP address, browser type and pages requested, kept in server and security logs. Our content-delivery and security provider also processes this.
- Anonymous counts of profile views and contact-button clicks. These are not linked to you.
Members (including VIP and VIP+)
- Email address and password (stored only as a one-way hash), and the date you accepted our terms.
- Favourites, alert settings and chosen cities (VIP), and your forum handle, posts and topic subscriptions (VIP+).
- Orders: the billing name, email and phone you enter at checkout, what you bought and payment status. We do not receive or store card or bank login details.
Advertisers
- Email, phone, WhatsApp number, display name and password hash.
- Listing content you choose to publish: photos, description, rates, location, physical attributes and services.
- Identity and age-check documents: a photo of your ID document and selfies, used only to confirm your age and that the photos are yours (see section 5).
- Boost-credit balance, purchases, availability history and status updates.
Job adverts and reports
- Job adverts: the contact details and description you publish.
- Reports: the reason, any detail you add, optionally your email, and your IP address (to stop abuse of the report button).
3. Special personal information
Information on this site can reveal a person’s sex life, and identity documents contain identity numbers. POPIA treats these as special or sensitive. We process them only with your consent — which you give by publishing a listing, submitting documents or posting — or where the law allows, for example to protect a child or to report a crime. You can withdraw consent at any time by deleting the content or your account; this does not affect processing that already took place lawfully.
4. Why we use it
- To run your account and deliver what you asked for: publishing listings, memberships, alerts, the forum and job adverts (contract).
- To check that every advertiser is an adult acting independently, and to investigate reports about minors, coercion, trafficking, fraud or abuse (legal obligation, and our legitimate interest in keeping people safe).
- To process payments and keep accounting records (legal obligation).
- To send service emails: payment confirmations, expiry reminders, alerts you switched on and forum replies you subscribed to (contract). You can switch alerts off in your account.
- To secure the site, prevent spam and fix problems (legitimate interest).
We do not sell personal information, do not use it for third-party advertising, and do not make automated decisions that have legal effects on you.
5. ID and age-check documents
Verification documents are stored in a protected folder on our server that blocks all web access and can be opened only by moderators through an authenticated admin link. They are never shown on the site or shared, except with authorities where the law requires it. You may cover your ID number and address — we only need your photo, name and date of birth to be readable. Documents are deleted within 180 days after the listing they belong to is removed. [Confirm retention period with your attorney.]
6. Who we share it with
- Visitors to the site: whatever you publish in a listing, job advert or forum post is visible to the people who can see that part of the site.
- Service providers who process information for us under contract: our web host ([HOSTING PROVIDER]), our content-delivery and security network (Cloudflare), our email delivery, and our bank for EFT reconciliation.
- Authorities: the South African Police Service, courts or regulators, when the law requires it or when we believe it is necessary to protect someone from serious harm, especially a child.
- A buyer of the business, if it is sold, on the same terms as this policy.
7. Information sent outside South Africa
Some of our providers store or process information outside South Africa (for example, Cloudflare operates globally, and [state where your host’s servers are]). We only use providers bound by laws or written agreements that give protection substantially similar to POPIA, as section 72 of POPIA requires.
8. How long we keep it
- Accounts and listings: while your account is open. Deleted listings are removed from the site straight away and from backups within [30] days.
- ID-check documents: see section 5.
- Orders and invoices: five years, for tax and accounting purposes.
- Forum posts: until you or we delete them, or your account is closed. [Decide: anonymise or delete posts on account closure.]
- Reports and moderation records: as long as needed to deal with the matter and to keep repeat offenders off the site.
- Server logs: [90] days.
9. How we protect it
All connections use HTTPS. Passwords are hashed, verification documents are kept in a folder that blocks all web access, staff access is limited to people who need it, and photos have location metadata (EXIF) removed when they are uploaded. No system is perfectly secure; if a breach affects you, we will tell you and the Information Regulator as POPIA requires.
10. Cookies and similar technology
- Age confirmation (vn_age_ok): remembers that you confirmed you are 18+.
- Login and security cookies: keep you signed in.
- Checkout session: keeps your basket during payment.
- Local storage: saves favourites on your device.
- Security cookies set by Cloudflare to protect the site from abuse.
We do not use advertising or cross-site tracking cookies. [Update this list if you add analytics.]
11. Your rights
You may ask us to confirm what personal information we hold about you and to see it; to correct or delete it; to object to processing based on our legitimate interests; and to withdraw consent. Email support@sabaddies.co.za from the address on your account. We will respond within a reasonable time and may need to confirm your identity first. Some information we must keep by law (for example, payment records).
If you are unhappy with how we handled your information, please contact us first. You also have the right to complain to the Information Regulator (South Africa) using the complaint forms on inforegulator.org.za.
12. Children
The site is strictly for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has an account or appears in a listing, report it immediately using the report button or support@sabaddies.co.za; we will remove it and may notify the authorities.
13. Changes to this policy
We may update this policy. The current version always appears on this page with its date, and we will tell account holders about material changes.