This policy explains what personal information Online Golf & General Auctions (Pty) Ltd ("OGGA", "we") collects when you use ogga.co.za, why we collect it and how we protect it. It follows the Protection of Personal Information Act 4 of 2013 (POPIA). Your rights under POPIA, and how to use them, are set out in our POPIA notice.
What we collect
Information you give us
- Account details: your first and last name, email address, mobile number and password. We store only a secure hash of your password, never the password itself.
- Addresses: your residential address, which we need to verify your identity before you bid, and any delivery addresses you save.
- Your preferences: which notification emails you want to receive.
- Messages: anything you send us when you contact us.
Information created when you use the site
- Auction activity: the bids you place, lots you watch, lots you win, offers you receive, your invoices and the delivery choices you make.
- Payment records: whether and when an invoice was paid and the payment reference. Card and bank details are entered on Paystack's secure pages and are never seen or stored by us.
- Technical information: the IP address and browser details recorded with each bid, which we keep to resolve disputes and prevent fraud, and standard server logs.
Why we use it
- To create and run your account and let you sign in securely.
- To run the auctions: accept bids, decide winners and show bid histories.
- To verify your identity before you bid, as South African law requires.
- To send the emails the service depends on, such as email verification, outbid alerts, invoices and payment reminders, and the optional emails you choose.
- To invoice you, take payment and deliver or hand over the lots you win.
- To prevent fraud, keep the site secure and enforce our auction terms.
- To meet our legal obligations, including tax and accounting records.
We rely on the contract between us, our legal obligations, our legitimate interest in a safe and fair auction and, for optional emails, your consent, which you can withdraw at any time under Account › Settings.
What other bidders see
Nothing that identifies you. Bid histories show bidders as Bidder 1, Bidder 2 and so on, numbered per lot. Only authorised OGGA staff can see who placed a bid.
Who we share it with
We do not sell your personal information. We share it only as needed with:
- Paystack, to process your payments.
- Our email delivery provider, Postmark, to send account and auction emails.
- Hosting providers, including Microsoft Azure, which store the site's data and files on our behalf.
- Couriers, who receive your name, delivery address and mobile number to deliver your parcel.
- Authorities, when the law requires it, or professional advisers when needed to protect our legal rights.
Some of these providers process information outside South Africa, for example in the United States or Europe. We only use providers bound by agreements or laws that give your information protection comparable to POPIA, as section 72 of POPIA requires.
Cookies and browser storage
We do not use advertising or tracking cookies. The site stores your sign-in session and, if you are not signed in, your watched lots in your browser's local storage so the site works as expected. Our fonts are loaded from Google Fonts, which receives your IP address when the page loads.
How long we keep it
- Account details and addresses for as long as your account is open.
- Bids, invoices and payment records for as long as tax and accounting law requires, currently at least five years after the transaction.
- When information is no longer needed we delete it or anonymise it so it no longer identifies you.
How we protect it
The site is served only over encrypted connections, passwords are stored as secure hashes, access to personal information is limited to staff who need it, and account sessions can be signed out on every device from your account settings. If a security breach affects your personal information, we will tell you and the Information Regulator as POPIA requires.
Your choices
- Update your details and addresses at any time in your account.
- Turn optional emails on or off under Account › Settings.
- Ask for a copy of your information, its correction or its deletion, as explained in our POPIA notice.
Contact
Questions about this policy? See our contact page. We may update this policy from time to time; the date at the top shows the latest version.