Privacy Policy

1. Who is responsible

Operator: Heather Kruger, trading as Upper Highway Hub
Email: info@upperhighwayhub.co.za
Telephone: 073 851 0390
Physical address and address for legal notices:10 Helier Road, Gillitts, 3610, KZN

Heather Kruger, trading as Upper Highway Hub, is the responsible party for the personal information we process to operate this website and our listing service. Send privacy requests to the email above with “Privacy request” in the subject.

2. Information we collect

• Account information: your name, username, email address and account authentication information.
• Listing information: business or event details, descriptions, contact details, locations, hours, dates, photographs and links that you submit.
• Transaction records: selected package, invoice details, payment status, subscription references and related correspondence.
• Support messages: information you provide when requesting assistance, cancellation or a refund.
• Technical information: information such as IP address, browser/device details, access times and security logs processed when the site is used.

We mainly collect information directly from you and from your use of the website. Payment providers may return transaction confirmations and status information. Where a listing representative supplies another person’s details, they must have authority to do so.

Information needed to create an account, administer a subscription or review a listing is necessary to provide that service. Optional details can be left blank. If required information is not supplied, we may be unable to process the relevant request.

3. What becomes public

Business and event details entered into public listing fields are intended to be published. These may include a contact name, telephone number, email address, location, photographs, website links and event dates.

Public pages can be viewed, shared, indexed by search engines and copied by others. An account profile, display name or author link may also be visible according to the website’s profile settings. Account login credentials and private payment records are not intended for public display.

Do not put a private home address, identity document, payment card details or other confidential information into public fields. Contact us if you are unsure which fields will be public. Removal from our website cannot guarantee immediate removal from independent search caches or copies.

4. Why we use information

• To create accounts, authenticate users and enable listing management.
• To review, publish and maintain submitted listings.
• To administer invoices, subscriptions, cancellations and refunds.
• To respond to requests, complaints and account notices.
• To secure the website, investigate abuse and maintain reliable service.
• To maintain records required by law and meet legal obligations.

Depending on the purpose, processing is based on performance of the service agreement, legal obligations, legitimate interests assessed against your rights, or consent where required. We do not rely on blanket consent to every form of processing.

5. Payments and service providers

Payments are processed through Payfast. Payfast processes payment credentials and authorisations under its own privacy terms. Please review its current information at payfast.io.

Our website receives payment and subscription references and transaction status information needed to administer listings. We do not ask you to send full card details, card security codes or banking passwords by email or through listing fields.

Authorised website administrators and service providers may process relevant information for hosting, website maintenance, email delivery, security and payment administration. Hostinger provides our hosting services. Access is limited to what is reasonably needed for the task and appropriate safeguards are required. We may disclose information where legally required or necessary to establish, exercise or defend legal rights. We do not sell personal information.

6. Cookies, measurement and planned listing analytics

The website uses cookies and similar technologies needed for functions such as login, session management and security. Browser settings let you manage cookies; blocking necessary cookies can prevent account functions from working.

Listing analytics and business reporting are planned. Before introducing additional analytics or advertising technologies, we will update this notice and implement any required choices or consent controls. We will explain which measures are collected and how they are reported. Business reports should use aggregated activity and should not disclose identifiable visitor information without an appropriate lawful basis.

Analytics configuration: [BEFORE PUBLICATION: confirm whether Google Analytics, Site Kit measurement, embedded maps, video, social content or other non-essential tracking is currently active. Replace this note with the actual providers, purposes, cookie choices and relevant privacy links. Do not describe active tracking as merely planned.]

7. Marketing communications

Service messages about accounts, listings and payments are separate from promotional messages. We will only send electronic direct marketing where permitted by law, obtaining consent where required and providing a way to opt out. You may request that promotional messages stop by emailing us. Opting out of marketing does not stop essential subscription or service notices.

8. Keeping information and international processing

We retain information for as long as reasonably necessary for the stated purpose, the service relationship, legal record-keeping, dispute resolution or another lawful need. We review retention and delete or de-identify information when no longer required. Backup copies may remain temporarily until their normal replacement cycle.

Hosting and other service providers may process information outside South Africa. Any such transfer must meet POPIA’s requirements, including appropriate protection or another permitted transfer basis. Contact us for information about the providers and safeguards applicable to your data.

9. Security

We use reasonable technical and organisational safeguards appropriate to the information and risks. No internet service can guarantee absolute security. Keep your password private and tell us promptly if you suspect unauthorised access.

Where a security compromise requires notification under applicable law, we will notify the Information Regulator and affected people as required.

10. Your privacy rights

Subject to applicable requirements and exceptions, you may request access to your personal information, correction of inaccurate details, deletion where justified, or object to processing on an applicable legal basis. Where processing relies on consent, you may withdraw it without affecting processing that was lawful before withdrawal.

Email us to exercise these rights. We may verify identity proportionately and explain any lawful fee, refusal or record-retention requirement. A deletion request does not automatically cancel a payment agreement: please also request subscription cancellation. We will help coordinate both requests.

If a concern is unresolved, you may complain to South Africa’s Information Regulator. Official contact details and complaint procedures are available at inforegulator.org.za.

11. Children, external links and updates

Accounts and paid subscriptions must be managed by adults or authorised adult representatives. Do not publish children’s identifiable information or photographs without the necessary lawful authority. Contact us if such content needs review.

Other businesses’ websites and services have their own privacy practices. We may update this notice when our practices change and will communicate material changes as appropriate. The date above identifies this version.