Privacy notice
Version 2026-10-26
Stoep is a buy-and-sell noticeboard for residents of De Aan-Zicht. It is run by Yuri, a De Aan-Zicht resident, who is responsible for your information under the Protection of Personal Information Act (POPIA). Stoep is independent and not affiliated with Balwin or the body corporate. Questions or requests: privacy@stoepmarket.co.za.
What we collect
- Your display name and mobile number, so neighbours can contact you about your listings and so we can check you live here.
- Your listings: titles, descriptions, prices and photos.
- Reports you make, and reports other residents make about listings or members.
- Basic technical logs (IP address, browser) kept by our hosting providers for security.
We don't collect your unit number, ID number or address, and we don't use analytics or advertising trackers. We don't ask for an email address or password either: Stoep keeps you logged in with a cookie on your device. The only other cookie briefly remembers a sign-in request while you wait for your code.
How we use it
- To check you're a resident: an admin confirms your number is in the estate WhatsApp group and sends you a one-time code on WhatsApp.
- To show your listings to other approved residents of your estate. When someone taps “Message on WhatsApp” on your listing, they see your display name and number.
- To keep Stoep safe: handling reports, removing listings that break the house rules, and removing people who no longer live here.
We never sell your information or send you marketing.
Who can see what
- Approved residents of your estate: your listings, and your name and number on listings you post. Nothing is visible to people who aren't approved.
- Estate admins: your name, number and membership status, to approve and manage members.
Where it's stored
Stoep uses these providers, which process data only on our instructions under data processing agreements:
- Supabase: database, login and photo storage, in London.
- Vercel: hosting, in London, with logs in the US.
None of them stores data in South Africa, so your information is transferred abroad. You agree to this when you sign up.
How long we keep it
- Listings and their photos are deleted 60 days after they're sold or expire, unless you renew them. Unpublished drafts are deleted after 14 days.
- Verification codes expire after 24 hours and are deleted soon after.
- Accounts that are never approved are deleted after 60 days. If you're removed from Stoep, your account is deleted after 30 days.
- Reports are deleted 12 months after they're resolved.
- Deleted data can remain in backups for up to 7 days.
Your rights
You can see, correct or get a copy of your information, or object to how we use it. You can delete your account at any time: this removes your profile, listings and photos straight away. Messages you've already exchanged on WhatsApp are on other people's phones and outside our control.
Because your login lives on your device, clearing your browser or changing phones logs you out. To get back in, enter your number on the login page and an admin will send a code to that number on WhatsApp. Your account and listings stay as they were.
To make a request, email privacy@stoepmarket.co.za. We'll reply within 30 days. If you're unhappy with how we handle your information, you can complain to the Information Regulator.
Changes
If we change this notice in a way that affects you, we'll ask you to accept it again the next time you open Stoep.