In brief
We collect only what we need to sell you a map and get it to you. We don't sell or rent your details, we don't send marketing you haven't asked for, and we never see your card number. The rest of this policy gives the detail the Protection of Personal Information Act, 2013 (POPIA) requires.
1. Who is responsible
Mapster, trading at mapster.co.za, is the "responsible party" for your personal information. You can contact our information officer at rossco@live.co.za.
2. What we collect
When you place an order we ask for:
- your name and email address, for every order;
- your cell number and PostNet branch, only if you add the SD card;
- any notes you choose to add to your order.
When you send a custom map request we ask for your name, email address and the water you want mapped, and you can add your cell number, your Lowrance model and notes. When you use the contact form we receive your name, email address, order number if you give one, and your message.
Our systems also record technical information needed to run the site and prevent fraud: your IP address, browser type, the pages you visit, and the time and IP address of the most recent download from each download link.
We do not collect payment card details. PayFast handles payments on its own pages, and we receive only a confirmation of payment, the amount and a payment reference. PayFast's handling of your information is governed by PayFast's privacy policy.
3. Why we use it
- To process your order, issue download links and send order emails (performance of a contract).
- To write and post your SD card and give PostNet the details it needs to notify you (performance of a contract).
- To quote for a custom map request, answer your questions and provide support.
- To detect and prevent fraud and misuse of download links (legitimate interest).
- To keep the financial records the law requires.
We will only send you marketing, such as news of a newly mapped dam, if you have opted in, and every such email will include a link to unsubscribe.
4. Who we share it with
Only with service providers who need it to deliver your order, and only as much as they need:
- PayFast: your name, email address, cell number if you gave one, the maps in your order and the amount, to process your payment.
- PostNet: your name, cell number and chosen branch, to deliver your SD card and tell you it has arrived.
- Email and hosting providers: to send order emails and keep our systems running securely. Some of these providers may store information outside South Africa; we use providers with adequate protection, as POPIA requires.
We never sell or rent personal information. We disclose it to authorities only where the law requires us to.
5. How long we keep it
Order records (name, email address, maps bought and amounts) are kept for five years to meet tax and consumer-law record-keeping obligations. Cell numbers and PostNet branches are kept for as long as needed to complete delivery and handle any dispute, then removed. Contact-form messages are deleted once resolved. Technical logs are cleared within 90 days.
6. Security
The site is served over HTTPS, download links use tokens that cannot be guessed and carry an expiry date and a download limit, and access to order information is restricted to the Mapster staff who need it. No system is perfectly secure, but we take the reasonable technical and organisational measures POPIA requires, and we will notify you and the Information Regulator if a breach affecting you occurs.
7. Cookies
We use only strictly necessary cookies: a session cookie that keeps your basket and the checkout working, and a security token that protects forms. We do not use advertising or tracking cookies.
8. Your rights
Under POPIA you may, at any time:
- ask what personal information we hold about you and receive a copy;
- ask us to correct or delete it, subject to the records we are required by law to keep;
- object to processing, or withdraw your consent to marketing;
- lodge a complaint with the Information Regulator of South Africa.
To exercise any of these rights, email rossco@live.co.za from the address you ordered with, or use the contact form. We respond within 30 days and don't charge for reasonable requests.
9. Children
The site is intended for adults. We don't knowingly collect information from anyone under 18. If you believe a child has given us their details, please contact us and we'll remove them.
10. Changes
If we change this policy, we'll update the date at the top of this page and point out any material change here.