Privacy notice

Who we are

HeartSpace is a volunteer-run theme camp at AfrikaBurn. We are the responsible party for the information on this site under South Africa's Protection of Personal Information Act (POPIA). Our information officer is the Camp Lead. Contact us at heartspace.ab@gmail.com.

What we collect

• Account: your email address and password (the password is handled by Google Firebase; we never see it).
• Identity: legal and preferred name, pronouns, optional gender, date of birth, WhatsApp number and country of origin.
• Your application: burn experience, Burner Bio, crew preferences, who you're applying with, commitments, fee tier, travel and logistics plans.
• Care details (optional until you're confirmed): dietary needs, medical notes, support needs, an emergency contact, and your ID or passport number.
• From the selection process: interviewer scorecards and the camp's decision.

Medical and support notes are health information, which POPIA treats as special personal information. We only process it with your consent, and only to look after you at the burn.

Why we use it

• To review your application, interview you and decide on membership.
• To plan the camp: crews, shifts, food, transport and build.
• To register tickets and Work Access Passes with AfrikaBurn, which need your legal name and ID or passport number.
• To look after your health and safety on site.
• To contact you about your application and, if you join, camp life.

We don't sell your information or use it for advertising.

Who can see it

• Interviewers assigned to you see your Bio and application answers. They never see care details or your ID number.
• The Members Lead, Camp Lead and Steering Panel see applications, scorecards and decisions to run selection.
• Care details are only for the people who need them: the Members Lead and Safety Lead (medical and support needs), the Kitchen Lead (dietary needs), and the Camp Lead (ID number for ticket and pass registration).
• AfrikaBurn receives your legal name and ID or passport number for tickets and passes, if you become a member.

Where it's stored

On Google Firebase (Authentication and Cloud Firestore). Application data is stored in Google's European data centres, which are covered by the EU's GDPR. Access is limited to the roles above and every change to an application is logged.

How long we keep it

• Care details and ID numbers: deleted within three months after the burn.
• Applications that don't lead to membership: deleted within twelve months after the burn.
• Members: we keep your membership record while you're part of the camp, so returning members don't start from scratch.

Your rights

You can ask to see the information we hold about you, correct it, or have it deleted, and you can withdraw your consent for health information at any time. You can change most answers yourself while your application is under review. For anything else, email heartspace.ab@gmail.com and we'll respond within 30 days.

If you're unhappy with how we handle your information, you can complain to the Information Regulator.