Privacy Policy

This Privacy Policy explains how FishHub (Pty) Ltd (registration number pending publication) ("FishHub", "we", "us") collects, uses, shares, and protects your personal information, and the rights you have under the Protection of Personal Information Act, 2013 ("POPIA"). It applies to https://fishhub.co.za and covers both our marketplace and the FishHub Store.

1. Responsible party and Information Officer

FishHub (Pty) Ltd is the "responsible party" for your personal information. Our Information Officer is {{ioName}}, contactable at privacy@fishhub.co.za. You can reach our Information Officer for any privacy question, request, or complaint.

2. What we collect

• Account information: name, email address, and password (stored hashed), and optional profile details.
• Listings and content: items you list, reviews, messages, photos, wishlists, and saved searches/alerts.
• Marketplace activity: what you search, view, and get alerts for — used to power discovery and price history.
• Store orders: items purchased from the FishHub Store, delivery address, and order history. Card payments are processed by our payment provider (PayFast); we do not store your full card details.
• Technical data: device, browser, IP address, and usage data, including cookies (see our Cookie Policy).

3. How we use it (and our lawful basis)

Purpose	Lawful basis (POPIA)
Create and run your account; provide the platform	Performance of our contract with you
Show marketplace listings, search, alerts, price history	Our legitimate interest in operating the marketplace
Process and deliver FishHub Store orders	Performance of our contract with you
Send service messages (security, order, alert notices)	Performance of contract / legitimate interest
Send marketing (newsletters, offers)	Your consent, which you can withdraw at any time
Analytics to improve the platform	Consent (analytics cookies — off until you accept)
Prevent fraud, abuse, and keep the platform safe	Legitimate interest / legal obligation

We keep marketing consent separate from accepting our Terms. You are never required to accept marketing to use FishHub.

4. The two roles and your information

• Marketplace: when you transact with another user, FishHub is the operator, not the seller. To let a sale happen, buyers and Sellers may share contact and delivery details directly with each other. Information you choose to share with another user is governed by how that user handles it; we are not the responsible party for their independent use of it.
• FishHub Store: when you buy from the Store, FishHub is the seller and processes your order and delivery details to fulfil your purchase.

5. Who we share it with (operators)

We share personal information only as needed, with "operators" who process it on our behalf under contract, including:

• Google Firebase (hosting, authentication, database) — Google;
• PayFast — payment processing for Store orders and paid features;
• email/notification providers for transactional and (with consent) marketing messages.

We do not sell your personal information. Some operators may process data outside South Africa; where they do, we rely on the transfer grounds permitted by POPIA (such as comparable protection or your consent).

6. Marketplace listings are public

Listings, shop profiles, reviews, and similar content are public by design — that is the point of a marketplace. Do not put information in a public listing that you do not want to be public.

7. How long we keep it

We keep personal information for as long as your account is active and as long as needed for the purposes above, then delete or anonymise it, unless we must keep it longer to meet a legal obligation (for example, tax records for Store sales) or to resolve disputes.

8. Your rights under POPIA

You have the right to:

• access the personal information we hold about you;
• correct information that is inaccurate;
• delete your information, where there is no overriding legal reason to keep it;
• object to processing based on legitimate interest;
• withdraw consent (for example, marketing) at any time.

You can exercise these rights from your account's privacy settings, or by emailing our Information Officer at privacy@fishhub.co.za. We will respond within a reasonable time. You also have the right to lodge a complaint with the Information Regulator (South Africa).

9. Security

We use technical and organisational measures — including access controls, server-side-only writes for sensitive operations, and encryption in transit — to protect your information. No system is perfectly secure, but we take reasonable steps to keep your data safe and to notify you and the Regulator if a breach occurs as required by POPIA.

10. Children

FishHub is not intended for children under 18 without parental consent. We do not knowingly collect children's information without consent.

11. Changes

We may update this Policy. Material changes will be reflected in the version and "last updated" date on this page.

12. Contact

Privacy questions and POPIA requests: {{ioName}}, privacy@fishhub.co.za. General support: support@fishhub.co.za.