Privacy Policy

Effective date: 6 July 2026 • Applies to Mpumalanga Local Time users worldwide

Introduction

Mpumalanga Local Time («we», «us») is committed to protecting the privacy of visitors, contributors and subscribers. This Privacy Policy explains the personal data we process, why we process it, and the legal basis for such processing. We follow the requirements of the Protection of Personal Information Act (POPIA) in South Africa, the EU General Data Protection Regulation (GDPR), and applicable privacy laws.

Information We Collect

We collect information you provide directly, information collected automatically, and information from third-party sources. This includes account registration details, contribution submissions, newsletters, comments, cookies, analytics, device identifiers, and service provider data.

Categories of Personal Information

Categories of personal information we process include:

• Identity and contact details (name, email address, username, postal address, phone number)
• Account credentials and profile data
• Contribution and comment content
• Usage data, IP addresses, browser and device information
• Cookie identifiers and analytics data
• Billing, payment and subscription details where applicable

How We Use Personal Information

We use personal information to:

• create and manage accounts;
• publish contributor content and maintain editorial workflows;
• respond to inquiries, support requests and legal obligations;
• deliver newsletters and service updates;
• analyze site usage, improve content and prevent abuse;
• manage advertising, consent preferences and cookie settings.

Lawful Basis and POPIA Conditions

Under POPIA we process personal information only when one or more lawful conditions apply, including:

• Consent, where users agree to cookies, marketing or newsletter communications.
• Contract performance, for account administration and service delivery.
• Legal obligation, for compliance with record keeping and reporting duties.
• Legitimate interests, balanced against individual rights, for fraud prevention, security, analytics and site operation.

We also comply with POPIA’s eight conditions for lawful processing: accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards, and data subject participation.

Cookies, Analytics and Consent

We use cookies and similar technologies for essential site operation, analytics, personalization and advertising. Necessary cookies are essential. Analytics and marketing cookies are enabled only after consent is granted through our Cookie Manager. We implement Google Consent Mode v2 and will not load GA4 analytics without explicit Analytics consent.

Third-Party Processors and Sharing

We share personal information with trusted processors only when needed for hosting, email delivery, analytics, advertising, security, and payment processing. We require written agreements with these entities under POPIA and GDPR where applicable. We do not sell personal information.

International Transfers

Personal information may be transferred outside South Africa or the EU when our service providers operate in other jurisdictions. We ensure transfers are subject to appropriate safeguards such as standard contractual clauses, equivalent protections, or user consent.

Data Retention

We retain personal information only as long as necessary to fulfill the purpose for which it was collected, to comply with legal obligations, and to resolve disputes. Key retention periods include:

• Account and profile information: retained while the account is active and for a reasonable period after closure for legal and security purposes.
• Comments and published contributions: retained until removed by the user or deleted under our content moderation policies.
• Cookie, analytics and usage logs: retained in aggregated or anonymized form for analytics and security as permitted by consent.
• Transactional records and correspondence: retained for up to 6 years or as required by applicable law.

See our companion retention schedule for additional details.

Security

We apply appropriate technical and organizational measures to protect personal information from unauthorized access, loss, alteration, destruction, or disclosure. This includes encryption, access controls, monitoring and training. No security system is impenetrable, so we regularly review and update our safeguards.

Children and Parental Consent

Our services are not directed at children under 18. We do not knowingly collect personal information from children under 18 without verified parental or guardian consent. If we learn we have collected personal information from a child without consent, we will delete it promptly.

Your Rights Under POPIA and GDPR

Individuals may exercise the following rights by contacting our Information Officer:

• access and obtain a copy of personal information;
• request correction or deletion of inaccurate, irrelevant, excessive or outdated information;
• object to processing based on legitimate interests or direct marketing;
• request restriction of processing;
• withdraw consent where processing depends on consent.

For EU data subjects, we also support data portability and objection to profiling, as required by GDPR.

Data Breaches

In the event of a confirmed data breach, we will evaluate the impact and notify affected individuals and the Information Regulator where required by law. We will also take steps to contain the breach and prevent recurrence.

Contact Information

Information Officer
Mpumalanga Local Time
Email: privacy@mplocaltime.co.za
Phone: +27 13 000 0000
Address: 123 Main Street, Mbombela, Mpumalanga, South Africa

Policy Updates

We may update this policy from time to time. We will publish any material changes here and revise the effective date at the top of the page.