POPIA Compliance

Last updated: October 8, 2026

1. Our Commitment

Barrels & Bushells is committed to protecting the personal information of everyone who uses our app. This document explains how we comply with the Protection of Personal Information Act, 2013 (POPIA) when we process personal information of data subjects in South Africa. It should be read together with our Privacy Policy.

2. Who We Are

For the purposes of POPIA, Barrels & Bushells ("we," "us," or "our") is the responsible party that determines why and how personal information is processed through this app.

3. Information Officer

Our Information Officer is responsible for encouraging and ensuring compliance with POPIA. You may contact the Information Officer for any question, request or objection relating to your personal information:

Information Officer — Barrels & Bushells
Email: support@barrelsandbushelsglobal.com

4. Personal Information We Process

We process the following categories of personal information:

  • Account information: your name and email address.
  • Usage information: venues viewed, favorites saved, visit history and trip planning activity.
  • Location information: your device location, only with your permission, to show nearby venues and route guidance.
  • Content you submit: reviews, ratings and private venue notes.
  • Transaction information: subscription and payment records. Card details are handled by our payment processor and are never stored by us.
  • Technical information: device and connection data needed to operate and secure the app.

5. Why We Process It

We process personal information only for the following purposes:

  • Creating and managing your account.
  • Providing the app's core features, including favorites, notes, visit history and trip planning.
  • Showing venues near you and providing route guidance, where you have allowed location access.
  • Processing premium subscriptions and payments.
  • Responding to your enquiries and requests.
  • Improving the app and understanding which venues and features are used.
  • Meeting our legal and accounting obligations.

6. Lawful Basis and Consent

We process personal information because it is necessary to provide the service you have requested, because you have given us consent, or because we have a legitimate interest or legal obligation to do so. Where processing relies on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before you withdrew it.

7. Sharing and Cross-Border Transfers

We do not sell your personal information. We share it only with service providers who help us operate the app, including our hosting and backend platform, our payment processor, and our mapping provider. Some of these providers store and process data on servers located outside South Africa, including in the United States and the European Union.

Where personal information is transferred outside South Africa, we take steps to ensure it receives a level of protection comparable to POPIA, either through contractual safeguards with the recipient or because the transfer is necessary to perform our agreement with you.

8. Security Safeguards

We implement appropriate technical and organisational measures to protect personal information against loss, damage, unauthorised access or disclosure. These include encrypted connections, access controls and restricting personal information to those who need it. If a security compromise occurs that affects your personal information, we will notify you and the Information Regulator as required by POPIA.

9. How Long We Keep It

We keep personal information only for as long as it is needed for the purposes described above, or as required by law. When you delete your account, your account, favourites, trip plans, reviews and notes are permanently removed. Records we must keep for legal, tax or accounting purposes are retained for the period the law requires, and are then securely destroyed.

10. Your Rights

As a data subject under POPIA you have the right to:

  • Be notified that we collect your personal information and whether it came from you.
  • Be told what personal information we hold and to request access to it.
  • Request correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained.
  • Object to processing on reasonable grounds.
  • Withdraw your consent at any time.
  • Not be subject to a decision based solely on automated processing that significantly affects you.
  • Lodge a complaint with the Information Regulator.

You can delete your account and its data directly in the app under Settings > Delete My Account, or contact our Information Officer at support@barrelsandbushelsglobal.com for any of the rights above.

11. Complaints to the Information Regulator

If you believe we have not complied with POPIA, you may lodge a complaint with the Information Regulator (South Africa):

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Complaints: complaints.IR@justice.gov.za
General enquiries: enquiries@inforegulator.org.za
Website: inforegulator.org.za

12. Changes to This Document

We may update this document from time to time. Any changes will be posted on this page with a new "Last updated" date.

13. Contact Us

For any question about this document or how we process your personal information:

Barrels & Bushells
Email: support@barrelsandbushelsglobal.com