Privacy notice
Last updated 13 August 2026
Who we are
Waves of Change Sandbaai NPC (NPC 2026/345560/08) is the responsible party for the personal information collected through this website, as contemplated in the Protection of Personal Information Act, 2013 (POPIA).
You can reach us at sandbaai.wavesofchange@gmail.com or on 063 665 4149.
What we collect and why
When you apply for membership we collect your name, contact details, physical and postal address, ID or registration number, your chosen membership type, the areas you are interested in, and anything you tell us about why you want to join.
We collect this to process your application, to keep an accurate membership register as a registered non-profit company is required to do, and to contact you about our projects and activities.
Your ID or registration number is used only to confirm identity and to prevent duplicate memberships. It is not shared and is not used for any other purpose.
Who can see it
Only authorised administrators of Waves of Change Sandbaai NPC can see your application.
We do not sell your information, and we do not share it with anyone else, unless the law requires it.
How long we keep it
We keep membership records for as long as you are a member, and for five years afterwards, so that the organisation can meet its record-keeping obligations. After that they are deleted.
Your rights
You may ask us what information we hold about you, ask us to correct it, ask us to delete it, or withdraw your consent at any time. Email sandbaai.wavesofchange@gmail.com and we will action it.
You also have the right to lodge a complaint with the Information Regulator of South Africa.
Photographs and location
Members who are signed in can record plant sightings and the work they have done. When you do, we store the photograph you take and — only if you press the button asking for it — the position of the plant or the place you worked.
The position is recorded so that the plant can be found again, or so that cleared ground can be shown on a map. It is a position on the ground, not a record of your movements: we do not track where you go, and nothing is recorded unless you choose to save a sighting.
Your photograph is made smaller in your own browser before it is sent to us. That removes the hidden data your camera adds, including the camera serial number and the position stored inside the picture, so none of it reaches us.
If the photograph does carry a position, we show you a button offering to use it — which is how you can record something you photographed days earlier. It is read on your own phone and is only ever sent to us if you press that button. Otherwise it is discarded with the rest of the hidden data.
Sightings are visible to anyone who visits the site, because knowing what grows in Sandbaai is the point of collecting it. Visitors who are not signed in see only a first name and initial, never the full name. If a plant is rare or at risk, tick the box that says so and the public map will show only a rough position — never the exact spot — because rare Cape plants are poached.
You may ask us to remove any sighting or record you have added, at any time.
This website
This website does not use advertising or tracking cookies, and it loads no third-party scripts or fonts. Photographs are served from our own address rather than from another company, so nothing about your visit is shared with anyone.
We count visits so that we know whether the site is being used. We do not store your IP address: it is turned into a one-way code using a key that changes every day, which lets us count the same person once in a day and deliberately cannot be used to recognise you tomorrow or to work out who you are.