Privacy Policy - CampusMarket DUT

1. Introduction

CampusMarket DUT ("we," "our," or "the Platform") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our student-to-student marketplace platform.

By using CampusMarket DUT, you consent to the data practices described in this policy.

2. Information We Collect

Information You Provide Directly:

Data Type	Purpose	Required?
Name	Display to other users, seller identification	Yes
Phone Number	Contact between buyers and sellers via WhatsApp	Yes
Campus Location	Facilitate safe on-campus meetups	Yes
Listing Content	Photos, descriptions, prices of items you list	Yes (for sellers)
DUT Student ID	Verification of student status (when requested)	Upon request

Information Collected Automatically:

Browser Information: Browser type, device type, operating system
Usage Data: Pages viewed, time spent on platform, listings browsed
Saved Items: Listings you save (stored in your browser's local storage)
IP Address: For security and fraud prevention

We do NOT collect: Credit card numbers, banking information, government ID numbers (except DUT student ID for verification), or precise GPS location.

3. How We Use Your Information

We use your personal information for the following purposes:

Platform Functionality:

Enable listing creation and browsing
Facilitate communication between buyers and sellers
Display your name and contact method on your listings
Verify you are a current DUT student

Safety and Security:

Prevent fraud, spam, and prohibited listings
Enforce our Terms of Service
Respond to reports of suspicious activity
Comply with legal obligations

Platform Improvement:

Analyze usage patterns to improve user experience
Identify and fix technical issues
Develop new features

We will NEVER: Sell your personal information to third parties, use your data for advertising outside the platform, or share your phone number without your consent.

4. Information Sharing and Disclosure

Information Visible to Other Users:

When you create a listing, the following information is publicly visible on the Platform:

Your name (as provided)
Your phone number (for buyer-seller contact)
Your campus location
Your listing details (title, description, photos, price)
Listing creation date

We May Share Information With:

DUT Authorities: If required for safety investigations or policy violations
Law Enforcement: When legally required or to prevent illegal activity
Service Providers: Cloud hosting (Supabase), image storage, analytics

We do NOT share, sell, or rent your personal information to marketers, advertisers, or other third parties for their own use.

5. Data Storage and Security

Where Your Data is Stored:

Database: Supabase (cloud-based PostgreSQL database)
Images: Supabase Storage (cloud object storage)
Saved Items: Your device's local browser storage (not on our servers)
Location: Data is stored on servers that may be located outside South Africa

Security Measures:

Encrypted data transmission (HTTPS/SSL)
Row-Level Security (RLS) policies on database
Input validation and sanitization
Regular security audits
Rate limiting to prevent spam

Important: While we implement reasonable security measures, no system is 100% secure. You are responsible for keeping your phone number private and reporting suspicious activity.

6. Data Retention

We retain your personal information for the following periods:

Data Type	Retention Period
Active Listings	Until marked as sold or deleted by you
Sold Listings	30 days after marked as sold, then deleted
Account Information	Duration of your enrollment at DUT + 90 days
Usage Logs	90 days for security purposes
Verification Records	1 year or until you request deletion

7. Your Privacy Rights

Under South African data protection laws (POPIA), you have the right to:

Access:

Request a copy of all personal data we hold about you
View your active and past listings

Correction:

Update your name or phone number
Correct inaccurate information in your listings

Deletion:

Delete your listings at any time
Request complete account deletion
Upon deletion, your data is removed within 30 days

Objection:

Object to processing of your data for certain purposes
Opt out of analytics or platform improvements

To exercise these rights: Contact us via the Platform or submit a request at campus support. We will respond within 30 days.

8. Cookies and Local Storage

CampusMarket DUT uses browser local storage to enhance your experience:

What We Store Locally:

Saved Listings: Items you've saved for later (not sent to our servers)
Seller Session: Your name and phone to pre-fill future listings
Draft Listings: Auto-saved listing drafts to prevent data loss
Preferences: Display settings, notification preferences

This data is stored only on your device. Clearing your browser data will remove it. We do not use third-party tracking cookies or advertising cookies.

9. Third-Party Services

CampusMarket DUT integrates with the following third-party services:

Supabase (Database & Storage):

Used for: Storing listings, seller information, and images
Privacy Policy: supabase.com/privacy

WhatsApp (Communication):

Used for: Connecting buyers and sellers
When you click "Message Seller," WhatsApp opens with the seller's number
WhatsApp's privacy policy applies to messages sent outside our platform

Lucide Icons (UI):

Used for: User interface icons
No personal data is collected or shared

10. Children's Privacy

CampusMarket DUT is intended only for DUT students aged 18 and over. We do not knowingly collect personal information from anyone under 18.

If we become aware that a user is under 18, we will delete their account and data immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be communicated via:

A notice on the Platform homepage
An updated "Last Updated" date at the top of this page

Continued use of the Platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

CampusMarket DUT
Student-to-Student Marketplace
Durban University of Technology
KwaZulu-Natal, South Africa

For data subject access requests or privacy inquiries, please submit via the Platform or contact campus support locations.

13. Compliance with POPIA

CampusMarket DUT complies with the Protection of Personal Information Act (POPIA), 2013. We process personal information lawfully, transparently, and for specified purposes only.

If you believe we have violated your privacy rights under POPIA, you may lodge a complaint with the Information Regulator of South Africa.