28 October 2026
The Tenth: RSVP privacy notice
Who we are
The Tenth is the tenth Bona Bona Platinum Auction, on Saturday 13 March 2027, with Piet du Toit Wildbedryf. This notice explains how we handle the personal information of the guests who RSVP for the auction weekend on thetenth.auction. Sellers and the auction team have a notice of their own, the site's privacy notice.
- Responsible party: Bona Bona Wildlife, N12, Klerksdorp. In this notice "we" means Bona Bona.
- Information Officer: Tarryn van der Berg, tarryn@bonabona.co.za, +27 82 769 4101. Write to them with any question about your information.
- Operator: Twisted Toast Digital, Johannesburg, builds and runs the site for us under a written agreement. It uses your information only on our instructions.
What we collect
We collect only what we need to welcome you for the weekend.
- Your RSVP: Which part of the weekend you will join, your name and surname, how many adults and children are coming and when you sent it.
- Your children's ages: One age for each child, to plan rooms and meals. We never ask for a child's name.
- Your numbers: Your WhatsApp number and, if you give one, another number for the guests' WhatsApp group, such as your partner's.
- Your email address, which also tells us whether you have sent an RSVP before.
- What you add: The names of the other adults sharing with you, whom you would like to stay near and your notes, if you give them.
- Your ticks: That you read this notice and agreed to the guests' WhatsApp group.
- To stop misuse of the form: A scrambled form of the internet address you send from, made with a key the RSVP database does not hold, so that it cannot be turned back into the address from the database or a copy of it. It is never in a backup copy and is deleted the first time the form is used once it is 24 hours old.
We do not take payments or card details on this site.
Why we use it
We use your information for the auction weekend and for nothing unrelated. Each use rests on a ground in section 11 of POPIA.
| What we do | Why we may |
|---|---|
| Allocate your accommodation and plan the weekend's meals | To arrange what you asked for in your RSVP |
| Tell you about the weekend and the auction, such as a change to the programme | To arrange what you asked for in your RSVP |
| Add your numbers to the guests' WhatsApp group | Your consent, which you give with the tick and can withdraw at any time |
| Keep the form safe from misuse | Our legitimate interest in a form that works |
We will not use your information to market anything else to you without your consent.
The guests' WhatsApp group
Your WhatsApp number and the other number, if you give one, go into a WhatsApp group for the weekend's guests, which the auction team runs. Every member of the group can see the numbers in it. If you give someone else's number, you confirm that they agree to join the group. WhatsApp is run by Meta, under its own terms and privacy policy. You can leave the group at any time.
Children
We ask only for each child's age, never a name. The person who sends the RSVP confirms that they are the parent or guardian of the children they list, or have their permission, as section 35 of POPIA asks.
Who sees your RSVP
We never sell your information. Only these see your RSVP, each for the purpose shown.
| Who | What they do for us | Where they hold it |
|---|---|---|
| Bona Bona's auction team | Reads RSVPs at the auction desk on this site, signed in as admins, to allocate the accommodation and run the weekend | South Africa |
| The lodge or guest farm where you stay | Receives your name, how many are in your party and your contact number, to host you | South Africa |
| Twisted Toast Digital | Builds and runs the site | South Africa |
| Vercel | Hosts the site | Frankfurt, Germany |
| Neon | Holds the RSVP database, apart from the sellers' database | Frankfurt, Germany |
| Google Workspace | Holds encrypted backup copies of the site | United States |
The auction team can download the RSVPs as a spreadsheet, to allocate the rooms. Each download is recorded with who made it and when.
We also share information when the law requires it.
Where it is stored
Some of the services above hold your information outside South Africa, in the European Union and the United States. Section 72 of POPIA allows this when the receiver is bound by law or a written agreement that protects it as well as POPIA does. The European Union's data protection law covers those in Europe and a written data protection agreement covers those in the United States. Your information also travels encrypted between you, the site and each service.
How long we keep it
We delete every RSVP by 30 June 2027, from the RSVP database and from every backup copy. The scrambled form of your internet address is never in a backup copy and is deleted the first time the form is used once it is 24 hours old.
How we keep it safe
- The RSVPs are kept in a database of their own, apart from the sellers' database.
- The form can only add an RSVP. It cannot read one back.
- Only the auction team's admins, signed in to the auction desk, see RSVPs.
- Information is encrypted between you and the site and encrypted where it is stored.
- The database is backed up. Each copy is encrypted as it is made, so that only Twisted Toast Digital can open it.
If your information is ever exposed, we will tell you and the Information Regulator as soon as we reasonably can, as section 22 of POPIA requires.
Cookies
The form sets no cookie of its own. Visits to the public pages are counted only if you accept Google Analytics, as the site's privacy notice (opens in a new tab) describes.
Your rights
You can ask us at any time what we hold about you and have it corrected or deleted. Write to our Information Officer and we will answer within 30 days.
- Change or cancel your RSVP: Contact Tarryn van der Berg on WhatsApp at +27 82 769 4101 or at tarryn@bonabona.co.za.
- See it: Ask for a copy of the information we hold about you (POPIA section 23).
- Correct or delete it: Ask us (section 24).
- Object: Ask us to stop using it for a purpose based on our legitimate interest (section 11(3)).
- Withdraw consent: Leave the guests' WhatsApp group, or ask us to take your numbers out of it. This does not undo what was lawfully done before.
If you are unhappy with our answer, you can complain to the Information Regulator: POPIAComplaints@inforegulator.org.za, 0800 017 160 or 010 023 5200, Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg 2191 (the Regulator's contact page (opens in a new tab)).
Changes to this notice
This notice was last changed on 28 October 2026. If we change how we use your information, we will update it here.