Legal & POPIA Compliance
Privacy Notice
Sand Swinger processes limited personal information to support community integrity reporting. We separate user accounts from golfers who are the subject of reports and handle every report as an integrity review, not an accusation.
Sand Swinger is not affiliated with GolfRSA or HNA. Information displayed here is for community awareness purposes only and does not constitute an official handicap ruling. Always verify information through official channels and your club's handicap committee.
What data we process
- Account details: name, email, club affiliation, and verification level.
- Verification snapshots: SA Player ID, Handicap Index snapshot, and token metadata needed to confirm eligibility.
- Integrity reports: event details, dates, course context, and structured observations.
- Evidence attachments (optional): photos or documents uploaded by the reporter.
- Support and security logs: contact messages, device metadata, and abuse-prevention signals.
Why we process it
- Verify that reporters are real, verified golfers.
- Enable moderators to review integrity reports responsibly.
- Protect subjects from abuse by enforcing factual, event-based submissions.
- Support dispute handling, corrections, and lawful data requests.
- Maintain audit trails for security, compliance, and appeals.
Retention periods
Retention windows are designed to minimize sensitive data storage while allowing proper review. Some periods depend on escalation or legal obligations.
| Data type | Retention |
|---|---|
| Integrity reports (structured fields) | Retained for trend analysis, then aggregated and pruned. |
| Evidence attachments | Auto-deleted after X days unless escalated to committee review. |
| Verification uploads | Deleted within days of verification. |
| Account profile data | While the account is active; typically deleted or anonymized within 30 days of a confirmed closure request. |
| Audit and moderation logs | Retained for security and legal compliance for a limited period. |
Access, correction, and deletion
You can request access to your data, corrections, or deletion where appropriate under POPIA. Requests are reviewed within reasonable timeframes and may require identity verification.
Dispute process
- Submit a dispute request referencing the report details.
- We mark the report as "needs review" and notify moderators.
- Moderators may request clarification, correct factual errors, or escalate to a committee review.
If you believe information about you is inaccurate, you may dispute this report or request a review of your data. See our Privacy Notice for more information.
Data operators
Sand Swinger uses Supabase for authentication, database storage, and file storage, and Vercel for application hosting. These providers act as contracted data operators/processors under POPIA and only process data on our instructions.
Data hosting locations
Data is hosted in the regions configured with Supabase and Vercel. If you need specific location details for compliance or data subject requests, contact our privacy team and we will provide the current hosting region information.
Contact
For privacy questions or POPIA requests, contact privacy@sandswinger.co.za. We may ask for verification details to protect subject rights.