THE LOOKOUT

Privacy Policy

Effective date: 26 October 2026
Responsible party (data controller): The Lookout, 106 Gardner Street, Risiville, Meyerton
Contact: daflea007@gmail.com · 060 508 0637

The Lookout is the responsible party (controller) for personal information processed through this platform, in line with the Protection of Personal Information Act (POPIA).

1. What we collect

Account details: email address, cellphone number, username, ward, and your terms acceptance date. Your email is used for account confirmation and sign-in; your cellphone number is retained as a contact detail for possible future resident communication, not verified by SMS. Providing a number does not opt you into marketing or future SMS messages.
Content you post: crime reports, municipal issues, photos, pinned locations, SOS alerts and their location, adverts and specials brochures.
Notification details: if you allow SOS alerts, a browser notification address for your device.
Technical data: IP address, device and browser information and basic usage logs, for security.

2. Why we use it, and legal basis

To create and run your account and provide the service (performance of our agreement with you).
To share community reports, SOS alerts and monthly reports with residents (legitimate interest in community safety).
To prevent abuse, fraud and security incidents (legitimate interest; legal obligation).
To send SOS notifications (your consent, which you can withdraw in your browser settings).

3. Who we share it with

Other residents: content you post (crimes, issues, SOS location, adverts) is visible to signed-in residents. Monthly reports never include SOS sender names.
Service providers: hosting, database, account email delivery and AI analysis providers who process data on our behalf. Registration does not send SMS messages.
Paddle (Merchant of Record): for advert sales, subscription management, payments, tax and invoicing.
Professional advisers (legal, accounting) and authorities where required by law.

4. Retention

We keep account data while your account is active and posted content for as long as needed for community records and monthly reports. When no longer needed, data is deleted or anonymised.

5. Your rights

Under POPIA you may request access to, correction or deletion of your personal information, object to processing, and withdraw consent. Contact us at daflea007@gmail.com. You may also complain to the Information Regulator (South Africa): inforeg.org.za.

6. Security

We use encryption in transit, access controls, private photo storage with temporary links, and database-enforced permissions.

7. Cookies and storage

We only use essential browser storage to keep you signed in. We do not use advertising or tracking cookies.