POPIA & GDPR Data Protection Compliance

Privacy Policy

How CrossLobby and Technomancers (Pty) Ltd collect, use, and protect your personal information under South African and international privacy laws.

Effective Date: 1 January 2026 • Published by Technomancers (Pty) Ltd 2026

This policy is formulated in strict accordance with the Protection of Personal Information Act, No. 4 of 2013 (POPIA) of South Africa and adheres to principles established under the General Data Protection Regulation (GDPR). Technomancers (Pty) Ltd acts as the Responsible Party for personal data processed through CrossLobby.

1. How We Collect Personal Information

The categories of personal data gathered when you use CrossLobby

Account & Identity Data

When registering an account or updating your profile, we collect your name, email address, password hash, bio, selected faction / flavor preference, and uploaded avatar. If registering via OAuth (Google or Facebook), we receive authentication tokens and verified profile emails with your explicit permission.

Geolocation Data (Consent-Based)

With your explicit browser or device consent, we access your device coordinates to suggest nearby specialty roasteries, cafes, and community meetups. We do not track your location in the background when the application or browser tab is closed.

Journal, Orders & Activity

We store information you generate inside the app, including brew logs (grind size, tasting notes, roast affinities), reviews of café items, coffee orders, check-in timestamps, earned points, badges, leaderboard ranks, and social feed comments.

Technical & Device Telemetry

We automatically collect technical data to guarantee platform reliability, including IP addresses, browser types, operating systems, security tokens, device identifiers, and error diagnostics.

2. How We Use Personal Information

Purposes and legal bases for processing your data

We process your personal information strictly for legitimate business and service purposes:

Delivering App Services: Authenticating your account, rendering your personal brew journal, calculating your taste profile, and delivering tailored Daily Brew recommendations.
Fulfilling Orders & Transactions: Transmitting order details and pickup tickets to participating cafés and roasteries when you place an order.
Managing Gamification & Fair Play: Calculating points earned from check-ins and reviews, verifying daily earning caps (1,000 pts / 2,000 pts with booster), and settling weekly, monthly, and seasonal tournament leaderboards.
Security & Fraud Prevention: Detecting duplicate accounts, bot networks, and suspicious activity to safeguard community members and merchants.
Support & Communications: Responding to customer inquiries sent via our contact methods and sending essential account notifications.

3. How We Protect & Store Personal Information

Robust technical and organizational security measures

Technomancers (Pty) Ltd employs multi-layered industry-standard safeguards to protect your personal information from unauthorized access, loss, alteration, or disclosure:

Encryption Everywhere All data in transit is encrypted using modern TLS 1.3 encryption. Passwords and sensitive tokens are cryptographically salted and hashed.

Tenant Isolation Customer data is partitioned logically within tenant boundaries to prevent cross-domain data leakage.

Zero Data Selling We never sell, trade, or rent your personal information to third-party data brokers, marketers, or advertisers.

Third-Party Processors: We partner only with PCI-DSS compliant payment gateways (such as Ozow Instant EFT and Yoco Card Payments) and enterprise cloud hosting infrastructure. Payment gateways process financial details directly; CrossLobby never stores complete credit card numbers or banking credentials.

4. Your Rights & Account Deletion (POPIA & OAuth)

Complete control over your personal data and right to be forgotten

Under Sections 23 and 24 of the POPI Act, you have the right to request access to, correction of, or deletion of your personal information held by Technomancers (Pty) Ltd.

Self-Service Account & Data Deletion

If you wish to permanently delete your account, brew journals, and all associated personal information:

Log in to your CrossLobby account.
Navigate to Profile > Settings > Personal Data.
Click Delete Account and confirm your request.

Manual Erasure & Third-Party (Google / Facebook) Requests: If you registered through Google, Facebook, or external OAuth and cannot access your account, you can request full erasure by emailing our Information Officer at privacy@technomancers.co.za or support@wsmconnect.com with the subject "POPIA Data Erasure Request". Requests are verified and processed within 30 calendar days.