1. Who we are
SATriHub (“SATriHub”, “we”, “us”) operates satrihub.co.za and is the responsible party for the personal information described in this policy, as defined in the Protection of Personal Information Act 4 of 2013 (“POPIA”).
Responsible party: SATriHub (Pty) Ltd
Information Officer: Ryan Frey
Email: privacy@satrihub.co.za
Address: Leslie Road, Lonehill, Sandton, 2056, South Africa
2. What this policy covers
This policy explains what personal information we collect, why we process it, who we share it with, how long we keep it, and what rights you have.
It covers two distinct groups of people, and the rules differ for each:
- Site users — anyone visiting the site, creating an account, or subscribing to updates.
- Athletes appearing in our results database — people whose race results we publish, whether or not they have ever used the site.
If you're an athlete who appears in our data and you'd like it removed, skip to Section 5.
3. Information we collect from you directly
| What | When | Why |
|---|---|---|
| Name, email address | Account registration, newsletter signup, contact form | To create and maintain your account, respond to you, send updates you asked for |
| Password (stored hashed, never in plain text) | Account registration | Authentication |
| Age group, gender, club, athlete profile details | If you complete a profile | To match you to your results and personalise rankings |
| Message content | When you contact us | To respond and keep a record of the correspondence |
We don't ask for identity numbers, financial details or health information, and we'd rather you didn't send them.
4. Information we collect automatically
When you visit the site we automatically collect:
- IP address, browser type and version, device type, operating system
- Pages requested, response codes, referring URL
This is standard server log data, collected by our hosting provider. We use it to keep the site secure and diagnose faults.
We do not use third-party analytics. We do not track you across other websites, and we do not run advertising or profiling tools.
5. Athlete results data
This is the part most relevant to South African triathletes, so we'll be direct about it.
What we hold. SATriHub compiles race results published by event organisers and timing providers — typically name, age group, gender, club or team, nationality, race entered, finishing position, and split and finish times. We combine results across races to produce rankings and statistics.
Where it comes from. Official published race results, event organiser websites and timing provider result portals. We do not scrape private accounts, and we do not collect training data, location data or health data.
Why we process it under POPIA. We process this information on the basis that it is contained in results deliberately made public by the athlete through entering a publicly-scored competition, and that processing is necessary for our legitimate interests in maintaining a public statistical record of South African triathlon (POPIA s11(1)(f) and s12(2)(b)). We consider this proportionate: the underlying results are already published, and our interest is statistical and journalistic rather than commercial profiling.
What we don't do with it. We don't sell athlete data. We don't use it for direct marketing to athletes who haven't opted in. We don't attempt to derive sensitive information from it.
Objecting or requesting removal. If you appear in our database and you'd prefer not to, email privacy@satrihub.co.za with your name and the races concerned. You may object to processing under POPIA s11(3). We will remove or anonymise your results within 30 days unless we have a legal obligation to retain them. We may keep an aggregate, non-identifying record so that historical field sizes and statistics remain accurate.
Corrections. If a result attributed to you is wrong, tell us and we'll fix it. Where the error originates with the timing provider, we'll correct our copy and, where we can, flag it upstream.
6. Why we process personal information
| Purpose | Lawful basis (POPIA s11) |
|---|---|
| Providing site functionality and your account | Performance of a contract / your consent |
| Publishing results, rankings and statistics | Legitimate interests; information made public by the data subject |
| Responding to enquiries | Legitimate interests |
| Sending newsletters or updates | Your consent (opt-in) |
| Site security, fraud and abuse prevention | Legitimate interests |
| Complying with legal obligations | Legal obligation |
7. Who we share information with
We share personal information only with operators processing it on our behalf, under contract, and only as needed:
- Supabase — database hosting and user authentication
- Vercel — website hosting and content delivery
- Resend — transactional and newsletter email delivery
- Truehost — domain registration and DNS
We may also disclose information where required by law, court order, or to protect our rights or the safety of others.
We do not sell personal information.
8. Cross-border transfers
Some of our operators store or process data outside South Africa. Supabase, Vercel and Resend operate infrastructure in the European Union and the United States.
Where this happens, we transfer information in accordance with POPIA s72, relying on the operator being subject to laws or binding contractual agreements that provide a level of protection substantially similar to POPIA.
9. How long we keep information
| Data | Retention |
|---|---|
| Account information | For as long as your account is active, then 5 years after closure |
| Contact and enquiry correspondence | 5 years |
| Newsletter subscriber details | Until you unsubscribe |
| Server logs | 90 days |
| Race results and rankings | Indefinitely, as a historical record, subject to objection under Section 5 |
Race results are retained indefinitely because the platform exists to maintain a historical record of South African triathlon. Any athlete may object to this under Section 5.
10. Security
We take reasonable technical and organisational measures to protect personal information, including encryption in transit (HTTPS), encrypted storage at rest, row-level security on our database, hashed password storage, and restricted administrative access.
No system is perfectly secure. If a breach occurs that creates a risk to your personal information, we will notify you and the Information Regulator as required by POPIA s22.
11. Cookies
We use cookies only where they are necessary for the site to work:
- Session and authentication cookies — to keep you logged in
- Security cookies — to protect against fraudulent requests
- Preference storage — to remember settings such as your default age group
We do not use analytics, advertising or cross-site tracking cookies.
You can block or delete cookies in your browser settings, though essential cookies are needed for account features to work.
12. Children
SATriHub is not directed at children under 18. We don't knowingly collect personal information directly from children.
Race results we publish may include athletes in junior age categories, since these appear in published event results. If you are the parent or guardian of a junior athlete and want their results removed, email privacy@satrihub.co.za and we will do so.
13. Your rights
Under POPIA you have the right to:
- Access the personal information we hold about you
- Correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained
- Object to processing based on legitimate interests
- Withdraw consent at any time, where processing is based on consent
- Not be subject to a decision based solely on automated processing
- Complain to the Information Regulator
To exercise any of these, email privacy@satrihub.co.za. Formal access requests may be submitted using POPIA Form 2. We will respond within a reasonable period and in any event as required by law.
14. Complaints
If you're unhappy with how we've handled your personal information, please contact us first — we'd rather fix it directly. You may also complain to:
The Information Regulator (South Africa)
Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
General enquiries: enquiries@inforegulator.org.za
POPIA complaints: POPIAComplaints@inforegulator.org.za
Tel: 010 023 5200
Complaints must be submitted in writing on the prescribed form.
15. Changes to this policy
We may update this policy as the platform develops. The “last updated” date at the top reflects the current version. Material changes will be announced on the site and by email to registered users.
16. Contact
SATriHub (Pty) Ltd
privacy@satrihub.co.za
Leslie Road, Lonehill, Sandton, 2056