How we handle personal information and protect your privacy under South African law.
1. Scope and responsible party
This Privacy Statement explains how personal information is collected, used, stored and protected when you use zastron.co.za, submit a form, request a directory update or otherwise interact with the website. The website administrators act as the responsible party for personal information processed through this website. Technical website services may be provided by Biographix Web and Media as an operator acting on instructions.
Last updated: 27 August 2026.
2. Personal information we may collect
Depending on how you use the website, we may collect:
- information you provide, such as your name, business or organisation, telephone number, email address, message, listing details and uploaded documents;
- technical information, such as IP address, browser and device type, referring page, pages visited, date and time, server logs and security events;
- cookie and similar technology data used for essential website functions, preferences, security and, where enabled, measurement or analytics; and
- business, event and community information obtained from listing owners, official sources, publicly available websites, maps or social media pages.
Please do not submit personal information that is not reasonably required for your request.
3. Why we process information
We may process personal information to:
- respond to enquiries and directory requests;
- publish, verify, correct and maintain community, tourism, event and business information;
- operate, secure, troubleshoot and improve the website;
- prevent misuse, spam, fraud and security incidents;
- measure website use where analytics is enabled;
- communicate about a request or listing; and
- comply with legal obligations or establish, exercise or defend legal rights.
4. Lawful basis
Information is processed only where permitted by applicable law. Depending on the circumstances, the basis may be your consent, steps taken at your request, performance of an agreement, compliance with a legal duty, or a legitimate interest such as maintaining an accurate community directory and protecting the website. You may withdraw consent at any time, although this does not affect processing already lawfully completed.
5. Directory and publicly available information
The directory is intended to help the public find local services and community information. Some listing information may already be publicly available or supplied by a business owner, organiser or community member. Publication does not make every detail personal information-free, and we will consider reasonable requests to correct, restrict or remove information.
If you submit information about another person or organisation, you confirm that you are authorised to do so and that the information is accurate to the best of your knowledge.
6. Cookies, embedded services and logs
The website may use essential cookies and technical storage needed for security, forms and normal operation. Optional analytics or embedded services may set their own cookies or collect technical data. Embedded maps, videos, social media content and other third-party features are governed by the provider’s own privacy terms.
You can control or delete cookies through your browser. Blocking essential cookies may affect website functionality.
7. Sharing and operators
We do not sell personal information. Information may be shared only when reasonably necessary with hosting, email, form, security, analytics, mapping and other service providers; with a listing owner or organiser to resolve a request; with professional advisers; or with authorities where required by law. Service providers are expected to process information only for the agreed purpose and with appropriate safeguards.
8. Cross-border processing
Some technology or cloud service providers may process or store information outside South Africa. Where this occurs, reasonable steps will be taken to use providers and safeguards consistent with POPIA’s requirements for transborder information flows.
9. Retention and security
Information is kept only for as long as reasonably needed for the purpose for which it was collected, to maintain an appropriate record, or to meet legal and security requirements. Directory information may remain published until it is corrected, replaced or removed.
Reasonable technical and organisational safeguards are used to protect information against loss, unauthorised access, interference, misuse or disclosure. No internet transmission or storage system can be guaranteed to be completely secure.
10. Your POPIA rights
Subject to POPIA and other applicable law, you may request access to personal information held about you, ask that inaccurate information be corrected, request deletion or destruction where lawful, object to certain processing, or withdraw consent. We may need to verify your identity and may refuse or limit a request where the law permits or requires it.
To make a request, use the Contact & Important Numbers page or the directory request form for listing corrections.
11. Children
The website is a general community information service and is not designed to knowingly collect personal information directly from children without appropriate authorisation. A parent or guardian who believes that a child has submitted personal information should contact us so that the matter can be reviewed.
12. Complaints and the Information Regulator
Please contact us first so that we can try to resolve a privacy concern. You also have the right to lodge a complaint with the Information Regulator (South Africa):
Telephone: 010 023 5200 or 0800 017 160
Email: az.gro.rotalugerofni@seiriuqne
Complaints: inforegulator.org.za/complaints
13. Changes to this statement
This statement may be updated when the website, service providers or legal requirements change. The latest version will be published on this page with an updated date.