Legal
POPIA privacy notice
Effective 19 April 2026 · Protection of Personal Information Act, 2013 · Republic of South Africa
This notice explains what personal information AuctionLayout.ai collects on this marketing site, why we collect it, how long we keep it and what rights you have under POPIA. It applies only to submissions through the public site. Use of the platform itself is governed by a separate agreement with your organisation.
1. Who we are
Twisted Toast Digital (Pty) Ltd (registration 2011/007466/07, VAT 4600260048) operates the AuctionLayout.ai platform and marketing site. Our registered address is 7 Cadiz Crescent, Dainfern Ridge, 2191, South Africa.
For the purposes of the Protection of Personal Information Act, 2013 (POPIA), we act as the Responsible Party for personal information you provide to us through this website.
2. Information we collect
Waitlist submissions collect your first name, work email address, optional organisation name, optional role, optional free-text message and an explicit POPIA consent checkbox tick. The request IP address and browser details are stored alongside the record for fraud and abuse detection.
Contact submissions collect your full name, email address, optional organisation name, the message you submit and an explicit POPIA consent checkbox tick. The request IP address and browser details are stored alongside the record for the same purpose.
When you use the platform itself, lot data, images and payment metadata are processed under a separate data processing agreement between your organisation and us. This privacy notice covers only the public marketing site.
3. Why we process your information
To respond to your waitlist or contact enquiry and to keep you informed about early access, pricing and onboarding milestones directly relevant to your request.
To keep a provable consent record showing that you opted in on a specific date, from a specific IP, using a specific device.
To detect and prevent malicious submissions (duplicate abuse, automated signups and similar).
4. Legal basis under POPIA
Section 11 of POPIA requires a lawful reason for processing. For waitlist and contact submissions, we rely on your explicit consent, captured when you tick the POPIA consent box on each form.
For fraud and abuse detection, we rely on our legitimate interests in protecting the platform, balanced against your rights as a data subject.
6. How long we keep it
Waitlist submissions are retained while the waitlist is active and for 24 months after the platform reaches general availability, unless you ask us to delete your record sooner.
Contact submissions are retained for 36 months from the date of submission, which covers the standard prescription period for commercial enquiries under the Prescription Act, 1969.
Analytics events are retained by Vercel for the period set out in their documentation and do not contain direct identifiers.
7. Your rights under POPIA
You have the right to request access to the personal information we hold about you, to request correction of inaccurate information and to object to or withdraw consent for further processing at any time.
You have the right to lodge a complaint with the Information Regulator of South Africa. The Regulator can be contacted at inforeg@justice.gov.za.
To exercise any right above, email our Information Officer at auctionlayout@twistedtoast.com. We will respond within 30 days.
8. Security
Traffic to the marketing site is served over TLS 1.2 or higher. Personal information is stored in a Postgres database with access controls that match each person's role and is encrypted at rest. Backups are encrypted and access-controlled.
We review our security posture regularly. No system is perfect, but we aim to hold personal information to the standard the wildlife auction industry expects of its suppliers.
10. Changes to this notice
This notice may be updated from time to time to reflect changes in the platform or the law. The current effective date is 19 April 2026. Material changes will be communicated to waitlist subscribers by email.
11. Contact the Information Officer
Information Officer: Twisted Toast Digital (Pty) Ltd
Address: 7 Cadiz Crescent, Dainfern Ridge, 2191, South Africa