POPIA and GDPR

Kapture is a small operation, and we would rather be straight with you than impressive.

We have not registered an Information Officer with South Africa's Information Regulator, and we hold no data protection certification. So we are not going to tell you Kapture is POPIA compliant or GDPR certified, because those are claims with a specific meaning and we have not earned them.

What we can tell you is what we actually do. POPIA and the GDPR are the standard we hold ourselves to: collect as little as possible, say plainly what it is for, keep it no longer than needed, and honour requests about it. The rights set out below are ones we will act on whoever you are and wherever you live, rather than only where a law obliges us to.

A copy of what we hold about you, in a form you can read.

A correction, if something we hold is wrong.

Deletion of what we hold, subject to anything we are legally required to keep, payment records being the usual example.

An explanation of where your information goes, meaning the kinds of provider we use and what each receives.

That we stop using your information for something, where we are relying on your agreement rather than on running the service you asked for.

If you are a host, you do not need to ask us. Account settings shows your name, your picture and the address on the account, and lets you change them. Your events list shows what you have created and lets you delete any of it.

Deleting your account removes everything we hold: your events, every photo, video and voice note behind them, your guest lists, unused plans and payment records. It happens immediately and cannot be undone, which is why the form asks for your password and the address typed out in full.

You have no account with us, and the album belongs to the host who invited you. So the fastest route to having a photo removed is to ask them. They can delete it from their dashboard in a moment, and they do not need our help to do it.

If you cannot reach the host, or they will not act, write to us. We will not pretend the content is nothing to do with us.

Email support@kptr.co.za. Say what you want and give us enough to find you: the address you signed up with, or the event and the name you joined under.

We will reply within thirty days, and usually a great deal sooner. If a request is one we cannot fully act on, we will tell you which part and why rather than going quiet.

We may need to check you are who you say you are before acting. That is not obstruction: handing someone else's photographs to whoever asks would be the actual failure.

Come back to us first. Most of what goes wrong is a misunderstanding we can fix in an email.

Beyond that, you are entitled to take it further. In South Africa that is the Information Regulator. In the UK or the EU it is your national supervisory authority. You do not need our permission to contact them and we will not hold it against you.

If we do register an Information Officer, or our position changes in any other way that matters, this page changes with it and the date at the top moves. We would rather update this than leave a claim standing that is no longer true, or one that was never true in the first place.