Legal
Privacy Policy
Last updated: 27 June 2026
Sunday Run Club ("SRC", "we", "us") is an informal running community based in Hazelwood, Pretoria, South Africa. This policy explains how we handle your personal information when you visit our website, sign up for a club event, or create an account. We aim to comply with the Protection of Personal Information Act, 2013 (POPIA).
1. Who is responsible
Sunday Run Club is not a registered legal entity. The person responsible for handling your personal information (the "Information Officer" for POPIA purposes) is:
- Sheldon Vorster, Club Owner
- Email: info@sundayrunclub.co.za
- Location: Hazelwood, Pretoria, South Africa
2. What we collect and why
| Data | Why we collect it |
|---|---|
| Name, surname, email | To create your account and identify you at events |
| Phone number | To contact you if an event is cancelled or moved |
| Display name, avatar, bio, location | So fellow runners can recognise you (optional) |
| Instagram / Strava handle | So members can connect with you (optional) |
| Event signups & check-ins | To run the events and maintain attendance records |
| Runs, shoes, yearly goal | To power your personal stats and the club leaderboard (you can opt out) |
| Authentication data (password hashes, OAuth IDs) | To sign you in securely |
3. Lawful basis
We process this information on the basis of (a) your consent when you sign up, and (b) our legitimate interest in operating a safe, coordinated running community.
4. Who we share it with (operators)
We use the following service providers ("operators" under POPIA) who process your data on our behalf:
- Lovable Cloud — hosting, database, authentication, email delivery.
- Google — only if you sign in with Google.
- Strava — only if you choose to link your Strava account.
- Shopify — order processing if you buy merchandise.
We do not sell your personal information. We do not share it with third parties for advertising.
5. Where it is stored
Data is stored on our backend provider's infrastructure, which may process data outside South Africa. Where this happens, we rely on the provider's safeguards. By using SRC you consent to this cross-border processing.
6. How long we keep it
We keep your account and related data for as long as your account is active. If your account has been inactive for 12 months, we may anonymise or delete it. You can ask us to delete it sooner at any time (see section 7) or do it yourself from your profile page.
7. Your rights
Under POPIA you have the right to:
- Know what personal information we hold about you.
- Ask us to correct or update it.
- Ask us to delete it.
- Object to processing or withdraw consent.
- Lodge a complaint with the Information Regulator (South Africa).
To exercise these rights, email info@sundayrunclub.co.za or use the Export my data and Delete my account buttons on your profile page.
8. Security
We use Row Level Security on all member data, HTTPS for all traffic, and admin actions are restricted to a small number of trusted accounts. We never store passwords in plain text. No system is perfectly secure — if we become aware of a breach affecting your data, we will notify you and the Information Regulator as required by POPIA.
9. Children
SRC is intended for runners aged 18 and older. We do not knowingly collect personal information from children. If you believe a child has registered, contact us and we will delete the account.
10. Cookies
See our Cookie Policy for details.
11. Changes
We may update this policy from time to time. Material changes will be announced on the website. The "Last updated" date at the top reflects the most recent version.
12. Complaints
You can lodge a complaint with the South African Information Regulator: inforegulator.org.za.