Privacy policy
Effective 25 October 2026**w
SwapTee is a marketplace where golfers swap, sell and buy the prizes they win at golf days. This policy explains what personal information we collect, why, who we share it with and your rights under South Africa's Protection of Personal Information Act (POPIA).
1. Who we are
SwapTee is run by OceanAce (Pty) Ltd (registration number 2026/360538/07, 24 Derry Street, Cape Town) ("SwapTee", "we", "us"). We are the responsible party for your personal information. Our Information Officer is A Morris, reachable at support@swaptee.co.za.
2. What we collect
When you sign up and sign in
- Your mobile number, if you sign in by SMS code
- Your email address, if you sign in by email code or add one for message alerts
- If you sign in with Google: your name, email address and profile picture from your Google account
Your profile
- The display name and photo you choose
- Your home club or area, and your approximate location. We round your location to about 1 km before storing it, so we never hold your exact position
- Whether your phone number is verified and how many trades you've completed
When you use SwapTee
- Prizes you list: photos, descriptions, prices, the recommended retail value and, if you set one, the lowest offer you'll consider (which only you can see)
- Offers, counter-offers and swaps you send or receive
- Messages you exchange with other members
- Your notification settings
When in-app payments and delivery are available
- Payment and payout details, collected and held by our payment provider; we don't store your card number
- Your chosen Courier Guy collection locker, and the name and phone number needed to deliver a parcel to you
Automatically
- Technical information such as your IP address, device and browser type, and logs of sign-ins and errors, used to keep the service secure and working
- A sign-in token stored in your browser so you stay signed in. We don't use advertising or tracking cookies
3. Why we use it
| Purpose | Information used | Basis under POPIA |
|---|---|---|
| Create your account and sign you in | Phone, email, Google profile | Needed to provide the service you asked for |
| Show nearby prizes and distances | Approximate location, home area | Needed to provide the service |
| Let members list, offer, swap, chat and trade | Listings, offers, messages, display name | Needed to provide the service |
| Send sign-in codes and service messages (e.g. "you have a new message") | Phone, email | Needed to provide the service; you can turn message alerts off |
| Process payments, buyer protection and refunds (when available) | Order and payment details | Needed to provide the service; legal record-keeping |
| Arrange Courier Guy delivery (when available) | Name, phone, collection locker | Needed to provide the service |
| Keep SwapTee safe: prevent fraud, spam and abuse, and enforce our Terms | Account, activity and technical data | Our legitimate interest in a safe marketplace |
| Meet legal obligations | Transaction records | Legal obligation |
We don't sell your personal information, and we don't send marketing messages unless you've agreed to receive them.
4. Who sees your information
Other members see your display name, profile photo, home area, verified badge, number of trades, your listings and the distance to them. The people you chat or trade with see your messages and offers. Other members never see your phone number, email address, exact location, or the lowest offer you've set.
Service providers process information for us, only to run SwapTee and under agreements that require them to protect it:
| Provider | What they do | What they receive |
|---|---|---|
| Supabase | Hosts our database, sign-in and file storage | All account, listing, message and settings data |
| Lovable | Hosts the SwapTee app | Technical data when you use the app |
| SMSPortal | Sends SMS sign-in codes | Your mobile number and the code |
| Resend | Sends sign-in codes and message alerts by email | Your email address, the sender's name, prize title and message preview |
| Signs you in, if you choose Google | Handled under Google's own privacy policy | |
| The Courier Guy (when delivery is available) | Delivers parcels to lockers | Name, phone number, collection locker |
| Our payment provider (when payments are available) | Takes payments, holds them until delivery, pays sellers | Payment, payout and order details |
We may also disclose information if the law requires it, to protect members or the public from harm or fraud, or as part of a sale or restructuring of the business (in which case this policy continues to apply).
5. Where your information is stored
Some of our providers store or process information outside South Africa, for example our database in Ireland (European Union) and email delivery by Resend. We only use providers bound by data protection laws or agreements that give protection comparable to POPIA, as POPIA requires for cross-border transfers.
6. How long we keep it
- Your account and profile: while your account is open. When you delete your account, we delete or anonymise your personal information within 30 days.
- Listings, offers and messages: while your account is open. We may keep messages linked to an open dispute or a report of abuse until it's resolved.
- Payment and order records (when payments are available): 5 years, to meet South African tax and financial record-keeping laws.
- Technical logs: up to 90 days.
- Backups: deleted data can stay in encrypted backups for up to 30 days before it's overwritten.
7. How we protect it
Information is encrypted in transit and stored with access controls that limit each member to their own data. Sign-in uses one-time codes rather than passwords, phone numbers and emails are never shown to other members, and locations are stored rounded. No system is perfectly secure; if a breach affects your information, we'll notify you and the Information Regulator as POPIA requires.
8. Your rights
Under POPIA you can:
- ask what personal information we hold about you and get a copy
- ask us to correct or update it (you can change most of it in Profile)
- ask us to delete it, or delete your account
- object to us using it for a purpose based on our legitimate interests
- turn off message alert emails in Profile → Notifications
- complain to the Information Regulator at inforegulator.org.za if you're unhappy with how we've handled your information
To use any of these rights, email support@swaptee.co.za from the email or phone number on your account. We'll respond within 30 days.
9. Age
SwapTee is only for people aged 18 or older. We don't knowingly collect information from anyone under 18; if we learn we have, we'll delete it.
10. Changes
If we make important changes to this policy, we'll tell you in the app or by email before they take effect. The effective date at the top shows when it last changed.
11. Contact
Questions or requests: support@swaptee.co.za, or write to OceanAce (Pty) Ltd, 24 Derry Street, Cape Town.