shield_person

Your Privacy as an Account Holder

This is separate from our general Privacy Policy — it covers what we hold about you, the nursery owner, manager, or staff member, not the parents who enquire through your listing.

Why this notice is separate

If you're a nursery owner, manager, or staff member using your Find My Nursery dashboard, some of your own personal information is processed by the platform — separately from the parent/enquiry data you see inside it. This notice explains what we hold about you as an account holder, and what rights you have over it. See our main Privacy Policy for how we handle parent/enquiry data.

What personal information of yours we hold

Claim/verification details — if you claimed your listing, we hold the name, role, email, phone number, and message you submitted to verify your connection to the nursery, plus a log of the emails we sent you during that process (approval, rejection, resend notices).
Account credentials — the email and password you use to log in to your dashboard (your password is stored securely hashed, never in plain text).
Payment references — if your nursery has a paid subscription, we hold payment references and transaction logs tied to your account, needed to administer billing. We don't store your full card details ourselves — that's handled directly by our payment processor, PayFast.
Team/staff invite data — if you've invited colleagues to your dashboard, or been invited yourself, we hold the inviter's/invitee's name, email, assigned role, and access permissions for as long as that account is active.

Why we process this

Verifying your claim and activating your account is necessary to provide the service you signed up for (POPIA s11(1)(b) — steps at your request).
Billing/payment records are necessary to administer your paid subscription (contractual necessity).
Staff invite data is necessary to run the access-control system that lets you manage who on your team can see what.

How long we keep it

[PLACEHOLDER — not yet published. Retention automation for claim requests/claim email logs isn't live for this window yet, and there's currently no defined offboarding/retention step for departed staff accounts. This section will state real numbers once that's built and confirmed — see POPIA.md §6 and §2.8.]

Your rights as an account holder

As the data subject for your own account information — separate from any rights regarding parent/enquiry data passing through your dashboard — you can:

Access the personal information we hold about you as an account holder.
Correct your own account details directly in your dashboard where editable, or by contacting us for anything that isn't.
Request deletion of your account and associated personal data, where we're not required to retain it for billing, legal, or security reasons.
Object to specific processing, or ask questions about what we hold.

To exercise any of the rights above, contact us at admin@findmynursery.net — the same contact address as the main Privacy Policy, kept consistent across both pages.