Privacy Policy

• Account details: display name, email address, password (stored as a secure hash), and optional profile details such as your suburb/city and avatar.
• Listing content: photos, descriptions, specifications and prices of the equipment you list, and the public questions and answers you post.
• Transaction data: orders, offers, escrow status, deal chat messages, ratings and reviews, and dispute details.
• Verification and payout data (sellers): identity (KYC) information and banking details collected by our escrow partner TradeSafe to verify you and pay you out. ClubHub stores only verification status and a reference token — not your full ID or bank account numbers.
• Technical data: IP address, device and browser information, and usage logs collected for security and to operate the service.
• Location (optional):if you choose to use “near me” search, your approximate location is used to find nearby listings. It is used for the search and not stored as a movement history.

• To provide the marketplace — account management, listings, search, offers, escrow transactions, deal chat, notifications (performance of our contract with you).
• Trust and safety — trust scores, fraud prevention, dispute resolution, enforcing our Terms (legitimate interest in a safe marketplace).
• Legal compliance — record keeping, tax, and responding to lawful requests (legal obligation).
• Service communications — transactional emails about your orders, offers and account (performance of contract). We do not send marketing email without your consent.

ClubHub is a marketplace built on transparency, so some information is visible to other members by design: your display name, avatar, general location (suburb/city), trust score, ratings and reviews, your listings, and the questions and answers you post publicly. Your email address, exact address and banking details are never shown publicly. Deal chat is visible only to the buyer and seller in that specific transaction.

• TradeSafe Escrow (Pty) Ltd — payment processing, escrow, seller KYC and payouts. TradeSafe acts as a responsible party for the KYC and payment information it collects, under its own privacy policy.
• Infrastructure and service providers — our database, authentication and file storage (Supabase), application hosting and traffic analytics (Vercel), transactional email delivery (Resend), error and performance monitoring (Sentry), and — only if you accept analytics cookies — product analytics (Google Analytics). These process data on our behalf as operators under POPIA.
• Authorities — where required by law, or to investigate fraud, stolen goods or abuse.

We do not sell your personal information to anyone.

Some of our service providers store data outside South Africa (for example, cloud hosting regions in Europe or the United States). Where this happens, we ensure the recipient is subject to laws or contractual terms that provide an adequate level of protection substantially similar to POPIA, as required by section 72 of POPIA.

We keep your information for as long as your account is active. Transaction records are kept for at least 5 years after the transaction to meet legal, tax and dispute-resolution requirements. When you close your account we delete or de-identify your personal information, except where we are required or permitted by law to retain it.

We protect personal information with appropriate technical and organisational measures, including encryption in transit, hashed passwords, row-level security on our database, and access controls that scope private deal chat to its two participants. No system is perfectly secure; if a breach occurs that is likely to harm you, we will notify you and the Information Regulator as required by section 22 of POPIA.

You have the right to:

• be told what personal information we hold about you;
• request access to it;
• ask us to correct or delete it;
• object to processing based on our legitimate interests;
• withdraw consent where processing is based on consent;
• complain to the Information Regulator (South Africa) — inforegulator.org.za, email complaints.IR@justice.gov.za.

To exercise any of these rights, email us at support@clubhub.co.za. We will respond within a reasonable time and at most within the periods POPIA prescribes.

We use strictly necessary cookies to keep you signed in and to secure the service (authentication session cookies). These are always on because the service can't work without them.

We use Google Analytics to understand how ClubHub is used, and it is off by default: its cookies are only set if you choose “Accept” on our cookie banner, and your choice is remembered on your device. We also use Vercel Analytics, which measures aggregate traffic without cookies and without tracking you across other sites. We do not use third-party advertising cookies and we do not sell your data.

ClubHub is not intended for children. You must be 18 or older to use the platform, and we do not knowingly process the personal information of children.

We may update this policy from time to time; material changes will be notified on the platform or by email and the “Last updated” date will change.

Questions about privacy, or POPIA requests: support@clubhub.co.za. See also our Terms & Conditions.