Midvaal MadMac Back to the race page

Privacy

Privacy Policy

How Midvaal MadMac and Meyerton Athletics Club (MAC) collect, use and protect your personal information, in line with South Africa's Protection of Personal Information Act 4 of 2013 (POPIA).

Last updated: 8 September 2026

1. Who we are

Midvaal MadMac is organised by Meyerton Athletics Club (MAC), based in Meyerton, Gauteng. For POPIA purposes, Meyerton Athletics Club (MAC) is the responsible party for the personal information described in this notice. You can reach us at info@midvaalmadmac.co.za.

2. What this notice covers

This notice covers midvaalmadmac.co.za only. Race entries themselves are processed on Race Pass, a separate service with its own privacy policy — Race Pass, not Meyerton Athletics Club (MAC), is the responsible party for the information you give them when you enter. Please check their site directly for how they handle that information.

3. What we collect on this site, and why

The only personal information this site actively asks you for is your email address, through the race mailing list sign-up. Giving it is entirely voluntary — declining has no effect on your ability to browse the site or enter the race via Race Pass.

Alongside the address itself we record the date you signed up, that it came from this website, and which version of the wording above you agreed to. That last one matters: it is how we keep the promise in the paragraph below, and without it we could not tell who had agreed to what.

We use it to send you Midvaal MadMac race news, and nothing else: a reminder before online entries close, and news about the next edition — entry dates, prices and route changes — when entries open. That is a handful of emails a year, not a regular newsletter. We don't sell, rent or share your address with sponsors or any other third party, and we don't use it to advertise anything other than this race.

If you signed up before September 2026, when the form promised only a single reminder before that year's entries closed, that narrower promise is the one that applies to you. We will ask you separately before sending you anything beyond it, and you can unsubscribe at any time either way.

4. Who else touches your data, and where

  • Brevo (Sendinblue SAS), our email service provider, stores your email address and sends our race emails on our behalf. Brevo is based in France and is itself subject to the EU's GDPR. See Brevo's own privacy policy for how they handle information as our processor.
  • If you scroll to the "Latest from Facebook" section, Meta loads that content directly from its own servers and may set cookies or otherwise process data under Facebook's Data Policy. We don't receive or store anything from that ourselves.
  • The route maps load tiles from OpenStreetMap, and this page's fonts load from Google Fonts — both mean your browser talks directly to those services, which (like any web request) logs your IP address on their end, independently of anything we store.
  • This site is hosted on GitHub Pages, with the custom domain and the email form's backend running on Cloudflare — both process standard web-server logs (IP address, browser type, pages requested) as ordinary hosting infrastructure.

5. How long we keep it

We keep your email address on our Brevo list until you unsubscribe or ask us to remove it. Because the list now carries news about the following year's race, that means it runs from one edition to the next rather than ending when entries close. You can ask us to delete it at any time (see below), and every email we send includes a one-click unsubscribe link that removes you immediately.

“Until you unsubscribe” is not the same as forever. POPIA does not let us hold an address longer than we actually need it, so we review the list once a year after the race and remove anyone who has not opened anything from us in three years. If you have quietly lost interest, you do not have to do anything — we will take you off ourselves.

6. Your rights under POPIA

You have the right to:

  • ask us what personal information we hold about you;
  • ask us to correct it if it's wrong;
  • ask us to delete it;
  • object to us using it for direct marketing at any time — that means every email on this list, and we have to stop when you say so;
  • lodge a complaint with the Information Regulator if you believe we've handled your information unlawfully.

To exercise any of these, email info@midvaalmadmac.co.za, or click "unsubscribe" in any email we send you.

7. Children

This site and its email sign-up are intended for use by adults — for example, a parent or club member signing up a family for the 5km. We don't knowingly collect personal information directly from children through this form.

8. The Information Regulator

If you're unhappy with how we've handled your information or a complaint, you can contact South Africa's Information Regulator:

JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
inforegulator.org.za — check their site for current complaint contact details, as these do change.

9. Changes to this notice

We'll update the date at the top of this page if anything here changes materially.