Privacy Policy

The responsible party for your personal information is Dani van der Linde, a sole proprietor, trading as Chertsey Endurance Festival. The festival is run as a sole proprietorship — not a company, non-profit or trust — which in law means the business and the person who runs it are the same, and she is personally accountable for your information.

• Address: Chertsey Farm, Cedarville, Eastern Cape
• Email: hello.chertsey@gmail.com
• Phone: 083 443 3949

When you register for an event and pay online, we collect:

• Your name;
• Your email address;
• Your contact phone number;
• The event(s) you enter and any entry details you provide;
• A payment reference and status from our payment provider (we do not collect or store your card or banking details — see section 6).

We use your personal information to:

• Register your entry and take payment of the entry fee;
• Send you a confirmation and information relevant to your entry;
• Contact you about the event, including any important changes;
• Keep records of entrants for event administration and safety;
• Comply with our legal obligations.

Our lawful basis is that the processing is necessary to conclude and carry out the entry agreement with you, to comply with the law, and — where relevant — your consent.

We do not sell your personal information. We share it only with trusted operators who process it on our behalf to run the entry and payment process, including:

• Our payment provider (Paystack), to process your payment securely;
• Our email provider, to send you confirmation and event emails;
• Our hosting and database providers, to operate the website and store entries;
• Authorities or advisors where we are required to do so by law, or to protect the safety of participants.

Some of these operators may process or store information outside South Africa. Where that happens, we take reasonable steps to ensure your information is protected by a comparable level of security and by contractual safeguards, as required by POPIA.

We keep your entry and payment records for as long as needed to administer the event and to meet our legal, accounting and dispute-resolution obligations, after which we securely delete or anonymise them.

Payments are handled by our third-party payment provider on their own secure, hosted checkout. Your card or banking details are entered directly with the provider and are never stored on our servers. We only receive a reference confirming whether your payment succeeded.

We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access and misuse — including transmitting data over encrypted (HTTPS) connections, validating input on our servers, and limiting who can access entrant records.

Some activities (such as the Kiddies Ride and youth entries) involve children. Where an entrant is under 18, the entry must be completed by a parent or legal guardian, who consents to our processing of the child’s information for the purposes described in this policy. If you believe we hold a child’s information without the necessary consent, please contact us and we will address it.

Under POPIA you have the right to:

• Ask what personal information we hold about you and request access to it;
• Ask us to correct or delete information that is inaccurate or no longer needed;
• Object to processing in certain circumstances;
• Withdraw consent, where we rely on your consent;
• Complain to the Information Regulator (see section 11).

To exercise any of these rights, contact our Information Officer, Dani van der Linde, at hello.chertsey@gmail.com. This is the same address as our general festival contact — we are a small team, and it reaches us directly.

This website uses only the cookies necessary for it to function and to keep it secure. We do not set advertising or tracking cookies of our own. If this changes, we will update this policy and, where required, ask for your consent.

Our venue map is embedded from Google Maps. When that map loads, Google may set its own cookies in your browser, under its own privacy policy rather than this one.

If you are not satisfied with how we handle your personal information, you may lodge a complaint with the Information Regulator of South Africa:

• Website: inforegulator.org.za
• Email: POPIAComplaints@inforegulator.org.za
• Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

We may update this policy from time to time. The date at the top shows when it was last revised; please check back for the latest version.