This notice explains what personal information Dues processes and why, in line with the Protection of Personal Information Act (POPIA).
What we collect
- Your name, email address, company and role when you create an account.
- The container numbers, ships and references you add, and your alert settings.
- Basic technical logs needed to run and secure the service.
Why
To provide the board and alerts you asked for, to send those alerts, and to keep the service secure. We do not sell personal information and we do not send marketing without your consent.
Who helps us run it
We use a small number of operators, each only for its job: our server host in Germany (netcup), an email service to send your alerts (Resend, a US company; our mail goes out from its servers in Ireland), Paystack for card payments (we never see your card number), and an SMS provider if you turn SMS on. Where information leaves South Africa, it goes only to providers bound to protect it as POPIA requires. Every night a backup copy comes to our own computer in South Africa, and from there into encrypted cloud storage (Google Drive) that the storage provider cannot read.
Cookies and counting visits
We set one cookie, to keep you logged in. We count page visits on our own server without cookies and without storing your IP address.
Security
Passwords are stored only as salted hashes, API keys only as fingerprints, and every connection is encrypted.
The port data
The port information on the site comes from files the terminals publish about ships and terminals. It does not contain personal information.
How long we keep it
For as long as your account is open, and then for no longer than we need to meet legal obligations.
Your rights
You can download or delete everything from Settings at any time. You can also ask to see, correct or delete your information, or object to processing, by writing to hello@dues.co.za. You may complain to the Information Regulator (inforegulator.org.za).