Privacy Policy

1. Who We Are

BASKET is operated by K2026377101 (South Africa). We provide a digital giving platform for churches and faith-based organisations, and an event ticketing platform for schools, in South Africa. For privacy enquiries, contact us at hello@basketgive.com.

2. What Data We Collect

We collect two types of data:

Organisation Data (collected at signup):

• Church or school name and registration number
• Authorised representative's name, email, and phone number
• Physical address and city
• Bank account details (stored securely via Paystack)
• PBO number, church registration number, or school registration details

Giving Data — churches (collected per transaction):

• Amount given
• Date and time of transaction
• Payment method (web, WhatsApp, or QR code)
• IP address (for fraud prevention)

Ticketing Data — schools (collected per ticket sale):

• Buyer name and email address (so the ticket can be delivered)
• Event, ticket type, and quantity purchased
• Amount paid, date and time of transaction
• IP address (for fraud prevention)

We do NOT collect: card numbers, or any unnecessary personal information. For church giving, we do not collect the identity of givers.

2b. What We Do Not Collect

For churches, BASKET does not collect or store the identity of congregation members who give. Church giving is anonymous by default — we see transaction amounts and accounts for reporting purposes, but we cannot identify who gave. For schools, a ticket buyer's name and email are collected only so that their ticket can be delivered and validated at the event. In all cases, card details are handled entirely by Paystack and never pass through BASKET.

3. Why We Collect This Data

4. How We Protect Your Data

• All data is stored in Supabase (PostgreSQL) with encryption at rest
• All connections use SSL/TLS encryption
• Bank account details are stored via Paystack's secure infrastructure — never on BASKET servers
• Passwords are hashed and never stored in plain text
• Access to production data is restricted to authorised personnel only
• Row-Level Security (RLS) ensures each church or school can only access their own data

5. Who We Share Data With

We only share data with:

• Paystack — for payment processing (subject to Paystack's Privacy Policy)
• 360dialog — for WhatsApp message delivery (subject to 360dialog's Privacy Policy)
• Supabase — for secure database hosting
• SendGrid — for transactional email delivery
• Regulatory authorities — when required by law (FICA, SARS)

We never sell your data to third parties. Ever.

6. Data Retention

• Active church and school accounts: data retained for the duration of the subscription or active use
• After cancellation: data retained for 12 months then deleted
• Transaction records: retained for 5 years (legal requirement)

7. Your Rights Under POPIA

As a data subject under POPIA, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal retention requirements)
• Object to the processing of your information
• Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at hello@basketgive.com.

8. Cookies

BASKET uses minimal cookies for session management only. We do not use tracking or advertising cookies. No third-party analytics cookies are used.

9. Children's Privacy

The BASKET platform is intended for use by authorised adult representatives of churches and schools, not by persons under the age of 18. Where a school sells tickets to events that minors may attend, BASKET collects only the ticket buyer's details, not those of any minor. We do not knowingly collect personal information directly from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. You will be notified by email of any material changes at least 30 days before they take effect.

11. Contact Us

For privacy-related queries or to exercise your POPIA rights:

• Email: hello@basketgive.com
• Website: https://basketgive.com
• Registered company: K2026377101 (South Africa)

Information Regulator of South Africa: www.justice.gov.za/inforeg