council@saoc.co.za
Legal

Privacy Policy

How the South African Orchid Council handles your information.

Draft pending legal review. This page has been drafted with AI assistance and has not yet been reviewed by a qualified legal professional. It does not constitute legal advice and should not be relied upon as SAOC’s final policy until formal review is complete.

Data we collect

We collect personal information directly from you in the following situations:

  • Contact form — your name, email address, and the message you submit.
  • Ticket checkout — your name, email address, and phone number, and, where the checkout form asks for them, your country, province, and town, so that tickets and door access can be issued and administered.
  • Vendor applications — business and contact details (business name, contact person, phone and email), and where applicable, regulatory information such as CIPC and VAT numbers and product permits, submitted by prospective national show exhibitors.

Who we share it with

We do not sell personal information. We do share specific information with the following service providers, only as needed to run the site and fulfil your request:

  • Our payment gateway — currently PayFast (sandbox), and, should the council change provider, whichever gateway is in live use at the time — receives buyer and payment details solely to process ticket payments.
  • Resend — sends transactional email on our behalf, such as order confirmations and contact-form acknowledgements.
  • Firebase and Google Cloud — Firestore stores contact submissions, ticket orders, and vendor applications; Firebase Auth secures the SAOC admin area; Firebase (Cloud) Storage holds documents vendors upload as proof of payment, such as EFT screenshots and receipts.

How long we keep it

We retain personal information for as long as needed to fulfil the purpose it was collected for — such as issuing and honouring a ticket, or processing a vendor application — and for as long afterwards as is required to meet our legal, accounting, or record-keeping obligations. Information no longer needed for these purposes is deleted or anonymised.

Cookies and analytics

This site does not currently use tracking cookies or third-party analytics. If this changes, this page will be updated to reflect it.

Your rights

Under South African law (POPIA) you have the right to request access to, correction of, or deletion of any personal information we hold about you.

Information Officer

SAOC’s Information Officer can be reached to exercise any of the rights above, or with any question about this policy, at secretary@saoc.co.za.

Complaints — the Information Regulator

If you believe we have not handled your personal information in line with POPIA, you may lodge a complaint with us using the details above, or directly with South Africa’s Information Regulator at inforegulator.org.za.

Questions

If you have any questions about this policy, please contact us.

Last updated: August 2026