Privacy notice

1. Who is responsible for your information

Bryandale Connect is built and run by parent volunteers for the Bryandale community. It is not an official school, SGB or BPA channel and has no access to the school's own records.

To be completed before launch: the registered responsible party and its information officer must be named here once the community decides whether the app is held by the BPA, the SGB or a separate volunteer entity.

2. What we collect

• Sign-in information: your email address and, if you use Google, the name and photo Google shares.
• Profile details: name, mobile number, Bryandale link, your full date of birth (only day and month are ever shown), groups and the ways you would like to help. Birthday display and WhatsApp birthday messages are on by default and you can switch them off at any time.
• Your children's names, dates of birth and current grade (or year they left), used only so admins can confirm your link to Bryandale. Only you and admins see this; children never appear on contact cards or public pages.
• Business details you submit for a listing, including a logo and your trading information.
• If you become a supplier: company registration and tax details and the certificates you upload.
• Messages you send through "Contact this business", and the date and time of each enquiry.
• A record of which QR code or link you arrived from, so we can see which introductions worked.

We do not ask for ID numbers, home addresses, passwords to other services, medical information, or anything about learners beyond the grade you tell us.

3. Why we collect it and who can see it

We use your information only to run the directory, the supplier register and the community features you asked for. Nothing is sold, and nothing is used for advertising.

• Public: only a business listing that an admin has approved — its name, logo, description, categories and the contact route through this app.
• Only you and the business owner: an enquiry you send. The owner's personal mobile number and email are never printed on a page.
• Only you, admins and named school, SGB or BPA users: supplier profiles and uploaded certificates.
• Only you and admins: your profile, consents and birthday choice.

Every consent (birthday display, WhatsApp contact, being listed, becoming a supplier) is recorded separately with the date you gave it, so we can show exactly what you agreed to.

4. Children

This app is for adults. Learners are never listed on a contact card, and we ask that you do not enter a child's personal details. Family profiles, if they are added later, will need a parent's consent before anything is shown.

5. Money and banking details

Bryandale Connect never displays the school's banking details and never shows fee amounts. If a listing mentions a price, that is the owner's own statement, not a quote from the school.

6. How we protect information

Access is controlled at the database, not just on the page, so a listing cannot be read or changed by someone who is not allowed to. Supplier certificates are stored in a private bucket that only you and school users can open. Admin actions are written to a log. Uploaded files are checked for type and size.

7. Where it is stored

Information is hosted with a cloud provider whose servers may be outside South Africa. Before launch we will name the provider and confirm the safeguards that apply to transfers out of the country.

8. How long we keep it

While your account is open, or while your listing is live. When you delete your account we remove your profile, listings and uploads, and we keep only the minimum needed for our records — for example a supplier document may be kept while the school needs it for a project it was used on.

9. Your rights

You can, at any time and free of charge:

• See and correct your profile from My account.
• Change or withdraw any consent from My account.
• Download a copy of the personal information we hold about you from My account.
• Delete your account and the personal information attached to it from My account.
• Ask us not to show your birthday, or not to be contacted on WhatsApp.

If you cannot sign in, or want something we could not do for you automatically, email the address in the footer and we will handle it by hand.

10. Complaints

Start with us at bryandalebpa@gmail.com. If you are still unhappy, you may complain to the Information Regulator of South Africa (inforegulator.org.za).

11. Changes to this notice

If we change what we collect or who can see it, we will update this page and tell members before it takes effect.