Hamba NathiBack to the site
HAMBA NATHI 2027

Privacy notice

DRAFT — NEEDS LEGAL REVIEWVERSION 0.1-DRAFT

When you join the journey, you trust us with your details. This notice explains, in plain language, what we collect, why, who sees it, and how to change your mind.

This is a draft. It hasn't been reviewed by a lawyer yet, and some details are still to be confirmed — they're marked PLACEHOLDER below.

Who we are

Hamba Nathi is an independent movement and is not affiliated with Rugby World Cup 2027, World Rugby, SA Rugby or any team.

Responsible party under the Protection of Personal Information Act (POPIA): PLACEHOLDER: registered legal name, registration number and physical address

Information officer: PLACEHOLDER: name and contact details Until these are published, please write to partner@hn2027.com.

What we collect

When you fill in the “Join the journey” form, we collect:

  • your name and email address;
  • your city or town, and its province if you pick it from the list;
  • your mobile number, if you choose to give it;
  • your organisation and role, if you choose to give them (we ask partners and sponsors);
  • how you'd like to take part, and what you're interested in — for example supporter, artist, or partner or sponsor;
  • which permissions you ticked, the exact wording you saw, and when;
  • how you found us: the page you arrived on, the website that sent you (if any), and any campaign codes in the link — for example a QR code, a partner's or artist's link, or standard “UTM” tags. These come from the link itself; you never type them.

Your name, email address and city or town are required — we can't register you without them. Everything else is optional. We don't ask for ID numbers or banking details.

Technical details

Our server briefly uses your internet (IP) address to stop floods of automated sign-ups. It isn't saved with your details. On your own device, the site remembers whether you prefer the 3D journey or the version without motion, and keeps the campaign details from your link until you close the browser tab, so they can go with your sign-up.

How we use your details

  • To keep you posted about Hamba Nathi — only in the ways you've ticked: email, SMS or WhatsApp.
  • To plan the journey: knowing where people are helps decide where the roadshow goes.
  • To reply to you about what you've asked for — performing, partnering, or bringing the journey to your town.
  • To see which campaigns, partners and links bring people in. Reports on this use totals, not names.
  • To sort registrations into groups — automatically, for example by city or town and by interest (such as artist or sponsor) — so we can plan and reply to the right people. Our team may also add labels and notes to your record, for example to follow up on something you asked us.
  • To keep an accurate record of what you agreed to and when, so we can respect your choices — and show that we do.

If you don't tick any permission, we won't send you marketing messages. We'll keep your registration so we know you're interested, and we may reply to you directly about something you asked us for.

Your permissions

The form asks for these permissions. Each one is optional, and none is ticked for you:

Email me news and updates about Hamba Nathi.
Send me Hamba Nathi updates by SMS.
Send me Hamba Nathi updates on WhatsApp.
I'm happy to receive offers and campaigns from Hamba Nathi's sponsors, sent by Hamba Nathi.
Hamba Nathi may share my details with its official partners so they can contact me about related events and projects.

SMS and WhatsApp updates need a mobile number.

When you answer, we record the exact wording, the version of this notice, and the date. If you join again later, your latest answers replace the earlier ones.

Sponsors, partners and service providers

Sponsors

Sponsors receive aggregate statistics only — totals such as how many people signed up in a province — never your name or contact details. Numbers under 5 are hidden (shown as “<5”), which makes it hard to pick anyone out of the totals.

If you tick the sponsor permission, Hamba Nathi itself sends you offers and campaigns from our sponsors. Your details stay with us: the sponsor permission never lets us give them to a sponsor.

Partners

The partner permission is the only one that lets us share your details with another organisation. If you tick it, we may share them with Hamba Nathi's official partners — and only so they can contact you about related events and projects. If you withdraw it after we've shared your details, we'll pass your opt-out on to the partners who received them.

Service providers

These services store or process your details for us:

  • Vercel hosts this website, including the join form that receives your details.
  • Turso, a cloud database service (libSQL), stores your details. The database is in the United States (Amazon Web Services, US East region), so your details are kept outside South Africa.
  • The site's email provider processes the emails we send — including the copy of your sign-up that goes to our team at partner@hn2027.com.

PLACEHOLDER: the name of the email provider, the countries where Vercel and the email provider process data, and the safeguards that protect your details when they're transferred outside South Africa (POPIA section 72)

Who can see your details

Only approved members of the Hamba Nathi team. They sign in to a private admin area with a one-time link sent to their approved email address, and every export and change they make is logged. Your details travel over encrypted (HTTPS) connections.

Outside the team, only the service providers above handle your details — and Hamba Nathi's official partners, if you tick the partner permission.

How long we keep them

We keep your details for PLACEHOLDER: retention period, and what happens afterwards

Unsubscribing withdraws your permissions but doesn't delete your details: we keep a record of your opt-out so that we never contact you by mistake. If you'd like your details deleted as well, email partner@hn2027.com.

Changing your mind

  • Unsubscribe link. Use the unsubscribe link in our messages. It withdraws all of your permissions at once: email, SMS, WhatsApp, sponsor offers and sharing with partners.
  • Email us at partner@hn2027.com and tell us what you'd like to change.
  • Join again with only the boxes you want ticked — your latest answers replace the earlier ones.

Withdrawing a permission doesn't affect anything we did with it before you withdrew it.

Your rights

Under POPIA you can:

  • ask whether we hold information about you, and for a copy of it;
  • ask us to correct or update it;
  • ask us to delete it;
  • object to us using it — including for direct marketing, at any time;
  • withdraw any permission you've given.

To do any of these, email partner@hn2027.com. We may ask you to confirm it's really you first, so we never hand your details to someone else.

If you're unhappy with how we've handled your information, please tell us so we can put it right. You also have the right to complain to the Information Regulator (South Africa): inforegulator.org.za (opens in a new tab).

Children

PLACEHOLDER: whether people under 18 may sign up, and how a parent or guardian gives consent for them

Changes to this notice

When this notice changes, we'll update the version number at the top. Every permission you give is recorded with the version of this notice that was current at the time.

Questions?

Email partner@hn2027.com. We're happy to explain anything in this notice.