Privacy & Data Protection

1. Lawful Basis for Processing

In accordance with the General Data Protection Regulation (GDPR) and the Protection of Personal Information Act (POPIA), Mavumium (Pty) Ltd processes your data based on Contractual Necessity and Legitimate Interest. We collect only the minimum data required to facilitate your agricultural simulation experience.

2. Data Collection & Purpose

We collect your email address and name primarily to create and maintain your user account. This allows you to:

• Save and track your progress in Agricultural Quizzes.
• Secure your position on the Global Farm Intelligence Leaderboard.
• Access personalized agricultural business plans and financial projections.

We do not use your personal information for any purpose other than providing these specific services. Your financial inputs (target profits, land size) are processed to generate simulations and are not linked to your identity in public reports.

3. Third-Party Processors (Paddle)

For payments and order processing, we use Paddle.com as our Merchant of Record. Paddle may collect personal data such as your billing address and payment information to complete transactions. Paddle's use of your personal information is governed by their Privacy Policy, available at paddle.com/privacy.

4. POPIA Compliance (Section 18)

As required by South African law, we inform you that:

• Your data is stored securely on encrypted cloud servers.
• The responsible party is the Mavumium Data Officer (ect.mavungah@gmail.com).
• Providing your data is voluntary, but necessary for account-based features.
• You have the right to object to processing and to lodge a complaint with the Information Regulator.

5. GDPR Rights

EU residents have the following rights:

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Correct inaccurate information.
• Right to Erasure: Request deletion of your account and data ("Right to be Forgotten").
• Right to Portability: Export your data in a machine-readable format.

6. Data Retention & Security

We retain your account data only as long as your account remains active. If an account is inactive for more than 24 months, we will anonymize or delete the associated personal data. We employ industry-standard SSL encryption and multi-factor authentication to protect your information.

7. Contact Information

Mavumium (Pty) Ltd

Address: 124 Main Street, Johannesburg, South Africa, 2001

Email: ect.mavungah@gmail.com