Privacy notice

TBC (registration number TBC), trading as Blunt Box, of 58b Heugh Rd, Walmer, Gqeberha, Eastern Cape, South Africa. We are the responsible party for the personal information described here.

Information Officer: TBC, reachable at info@bluntbox.co.za.

When you submit a membership application, we collect:

• Your full name.
• Your email address.
• Your phone or WhatsApp number.
• Your South African ID number.
• A photograph or scan of your ID document.
• Optionally, how you heard about us.

We do not collect anything else. This website runs no analytics, no advertising trackers, and no profiling. It sets no cookies of its own.

Your name and contact details let us process the application and reach you about it. Your ID number and ID document exist for one purpose: proving you are 18 or older, which the law and our own rules require before anyone can become a member.

We rely on your consent, given when you submit the form, and on our obligation to restrict membership to adults. You may withdraw consent at any time, though we cannot maintain a membership without verified proof of age.

This website stores nothing. Your application is not written to a database, a file store, or a content delivery network. It is delivered once, by email, to us and then exists only in our mailbox.

Two service providers are involved in getting it there:

• Vercel, which hosts this website and passes the submission through without retaining it.
• Resend, which delivers the email. Resend processes data outside South Africa, in the United States. Under section 72 of POPIA this is a cross-border transfer, made on the basis of your consent and subject to that provider's own contractual safeguards.

The map on our contact section is embedded from Google Maps. When it loads, Google receives your IP address and may set its own cookies, under Google's privacy policy rather than ours.

We do not sell your information, rent it, trade it, or hand it to marketers. It reaches nobody outside the lounge except as described above, or where the law compels us.

ID documents are kept for TBC after your membership is verified, and then deleted. Membership contact records are kept for as long as you are a member, and for a reasonable period afterwards to meet record-keeping obligations.

If your application is unsuccessful, we delete the ID document and the ID number once the decision is made.

Applications travel to us over an encrypted connection. Your ID document is never written to this website's servers or storage. Access to our mailbox is limited to the people who process memberships.

No system is perfect. If personal information is ever compromised in a way that creates a real risk to you, we will tell you and the Information Regulator, as POPIA requires.

Under POPIA you may, at any time and free of charge:

• Ask what personal information we hold about you.
• Ask us to correct anything wrong or incomplete.
• Ask us to delete it, subject to any law requiring us to keep it.
• Object to how we are processing it.
• Withdraw the consent you gave.

Email info@bluntbox.co.za and we will act within a reasonable time.

If we have not dealt with you properly, you can complain to the Information Regulator (South Africa) at inforegulator.org.za, which publishes its current complaint channels and forms.

If this notice changes, the revised version appears here with a new date. Material changes affecting how we use your ID information will be communicated to members directly.