1. Who we are
Amigomap is a trading name and business division of Halloterra (Pty) Ltd, registration number 2026/154512/07. Halloterra provides the Amigomap SaaS mapping and experiential platform.
Our principal address is 184 Upper Buitenkant Street, Oranjezicht, Cape Town, 8001, South Africa. Our Information Officer is David de Waal, contactable at privacy@amigomap.com.
In South African privacy terminology, Halloterra may be a "responsible party" or an "operator" depending on the processing. In other jurisdictions, similar roles may be described as "controller" and "processor".
In this Policy, "personal information" means information relating to an identifiable living natural person and, where POPIA applies, an identifiable existing juristic person such as a company, association or other organisation.
2. Scope
This Policy applies to personal information processed through the Amigomap marketing website, account and authentication flows, MapMaker, published-map viewer, support channels, public comments and photographs, billing administration and related services.
Paddle processes buyer and payment information as merchant of record under Paddle's own privacy notice. Other third-party services may also process information under their own notices.
3. Our role and the Customer's role
Halloterra is ordinarily the responsible party or controller for website visitors, customer contacts, account administration, product security, service analytics, support, marketing and Halloterra's billing and business records.
A Customer is ordinarily the responsible party or controller for personal information it chooses to include in maps, access lists, routes, images, comments, event information or other Customer Content. For that information, Halloterra generally processes it as the Customer's operator or processor to provide the service.
Customers must provide legally required notices, obtain required consents or other lawful bases, and avoid uploading personal information that is irrelevant or excessive for the intended purpose.
4. Personal information we collect
- Account and identity information: name, email address, organisation, role, user identifiers, authentication status and account preferences.
- Customer and business information: company name, domains, team membership, plan, support contacts and account-administration records.
- Transaction and subscription information: product, plan, status, transaction or subscription identifiers, payment status, country and tax-related information received from Paddle. Halloterra does not ordinarily receive full payment-card details.
- Customer Content: maps, routes, tracks, geographic coordinates, access lists, selected email addresses, text, images, logos, documents, comments, photographs and associated metadata.
- Technical and usage information: IP address, device and browser information, timestamps, pages or features used, request and security logs, map-load information, error reports and cookie or local-storage identifiers.
- Location information: geographic content deliberately uploaded or selected for a map and, where a device feature requests it, device location only after the user grants the relevant browser or device permission.
- Communications: support requests, feedback, sales enquiries, survey responses and correspondence.
- Marketing preferences: consent status, communication preferences and unsubscribe records.
5. How we obtain information
- Directly from a person who registers, contacts us, submits content or uses the service.
- From a Customer administrator who invites or manages an Authorised User.
- From Public Users who submit comments, photographs or other content to a published map.
- Automatically from browsers, devices, servers, cookies, logs and security tools.
- From service providers such as Clerk and Paddle where needed for authentication, fulfilment, subscription status, support, fraud prevention or legal compliance.
Required and optional information
Some personal information is required to create, authenticate, administer or secure an Amigomap account, provide a requested feature, process a support request, fulfil an agreement or comply with law. Required information may include a person's name, email address, organisation, authentication information and information identified as required in a form.
Other information and most Customer Content are provided voluntarily. If required information is not provided, Halloterra may be unable to register or authenticate the person, provide the relevant feature, administer the Customer account, respond to the request or perform the applicable agreement.
6. Why we process personal information
| Purpose | Typical lawful basis |
|---|---|
| Create and administer accounts; provide maps, publishing, viewing and support | Contract; steps requested before contract; legitimate interests |
| Authenticate users, secure accounts, prevent fraud and investigate abuse | Contract; legal obligations; legitimate interests |
| Process plan status, fulfil purchases and maintain transaction records | Contract; legal obligations; legitimate interests |
| Host, deliver, moderate and display Customer Content and public submissions | Contract; Customer instructions; legitimate interests; consent where required |
| Measure plan usage, enforce limits and maintain service reliability | Contract; legitimate interests |
| Communicate service notices, security messages and support responses | Contract; legal obligations; legitimate interests |
| Improve features, diagnose errors and understand service performance | Legitimate interests; consent for non-essential analytics where required |
| Send marketing | Consent where required; otherwise legitimate interests subject to opt-out |
| Comply with law, enforce agreements and establish or defend claims | Legal obligations; legitimate interests |
Where the law requires consent, a person may withdraw it prospectively. Withdrawal does not affect processing that was lawful before withdrawal, and some services may no longer be available if the information is necessary to provide them.
7. Public information
Information included in a public map may be accessible worldwide to anyone with the link and may be copied, indexed, embedded, captured or redistributed by others. Public comments or photographs approved for display may also become publicly visible.
Do not publish personal, confidential or sensitive information unless there is a valid reason, an appropriate lawful basis and a clear understanding that public disclosure may be difficult to reverse.
8. When we disclose information
- To the Customer and its account administrators, including information about Authorised Users and activity needed to administer the Customer account.
- To infrastructure and service providers that help operate Amigomap, such as authentication, hosting, database, cloud-storage, mapping, media-delivery, email, support, logging, security and monitoring providers.
- To Paddle for transaction-related fulfilment and support, and from Paddle to Halloterra as permitted for product fulfilment, account administration, fraud prevention and support.
- To professional advisers, insurers, auditors and potential transaction counterparties under appropriate confidentiality safeguards.
- To authorities, courts or other persons where required by law or reasonably necessary to protect rights, safety, security or the integrity of the service.
- In connection with a genuine merger, financing, restructuring or sale, subject to appropriate safeguards.
We do not sell personal information to third parties for money. We do not permit a service provider to use information for its unrelated purposes merely because it processes information for us.
9. Key service providers
The providers used may change as Amigomap develops. Current or intended providers may include:
- Clerk - authentication and identity services.
- Paddle - merchant of record, checkout, billing, tax and buyer-support services.
- Mapbox - map rendering, map data and related mapping services.
- Cloudinary - storage, processing and delivery of images and other media.
- Hosting, database, email and operational providers selected by Halloterra.
Each provider processes information under its own contractual and privacy obligations. Where a provider acts independently, its own privacy notice also applies.
Third-party websites and applications
Amigomap may contain links to or allow users to open third-party websites, applications or services, including navigation services, event websites, sponsor websites, social-media services and websites selected by Customers.
This Policy does not govern the independent processing activities of those third parties. Their own privacy notices, cookie notices and terms apply when a person visits or uses their services. Halloterra does not control and is not responsible for the privacy, security or content practices of an independent third party.
10. International processing and transfers
Halloterra is based in South Africa, while service providers and users may be located in other countries. Personal information may therefore be processed in South Africa and in jurisdictions where providers operate.
Where required, we use contractual protections, provider due diligence and other lawful transfer mechanisms intended to provide an appropriate level of protection. Laws in a destination country may differ from those in the person's home country.
11. Security
We use reasonable technical and organisational safeguards appropriate to the nature of the information and the risks of processing. Measures may include access controls, authentication, segregation of customer data, secure transport, logging, backups, provider management and incident response.
No system is completely secure. Customers must also protect accounts, limit permissions and avoid placing unnecessary sensitive information in maps or public content.
Where Halloterra reasonably believes that personal information has been accessed or acquired by an unauthorised person, it will assess and make notifications required by applicable law.
12. Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the service, maintaining security and backups, meeting accounting and legal duties, resolving disputes and enforcing agreements.
Retention periods vary. Account information is generally retained while an account is active and for a reasonable period afterwards. Transaction, tax, security and legal records may be kept for the period required by law or reasonably necessary to resolve disputes, prevent fraud and enforce agreements. Customer Content will ordinarily remain eligible for recovery for up to 90 days following account closure or termination, or the end of an expired plan that is not reactivated.
After the 90-day recovery period, Halloterra may delete or de-identify Customer Content from active systems. Residual copies may remain temporarily in secure backups until overwritten in the ordinary course. A legal hold, security investigation, dispute or written enterprise agreement may require a different period.
13. Your rights
Subject to applicable law and valid exceptions, a person may ask Halloterra to:
- confirm whether Halloterra holds personal information about them;
- provide access to or a description of that information;
- correct information that is inaccurate, incomplete, misleading or out of date;
- delete or destroy information Halloterra is no longer authorised to retain;
- object to certain processing;
- restrict processing or request portability where an applicable law provides those rights;
- withdraw consent where processing is based on consent; and
- complain to a competent privacy regulator.
Requests should be sent to privacy@amigomap.com. We may need to verify identity and authority. Where the request concerns Customer Content, we may refer it to or coordinate with the relevant Customer.
14. Marketing communications
Service and security communications are not marketing and may be necessary to operate an account.
A person may opt out of marketing by using the unsubscribe link or contacting us. We may retain minimal suppression information to ensure that an opt-out is respected.
15. Cookies and similar technologies
We use cookies, local storage and similar technologies as described in the Cookie Notice. Necessary technologies support authentication, security and core functions. Non-essential analytics or marketing technologies will be used with consent where applicable law requires it.
16. Children
Amigomap's customer accounts are not intended for people under 18. A Customer must not knowingly use the service to collect or publish children's personal information unless it has a valid lawful basis, provides appropriate notices and obtains any required parent or guardian permission.
If you believe a child's information has been submitted improperly, contact us promptly.
17. Changes to this Policy
We may update this Policy as the service, providers or law changes. Material changes will be notified through the website, service or email where appropriate. The effective date at the top shows when the current version applies.
18. Contact and complaints
Information Officer: David de Waal. Email: privacy@amigomap.com. Address: 184 Upper Buitenkant Street, Oranjezicht, Cape Town, 8001, South Africa.
A person may also complain to the Information Regulator (South Africa). General enquiries may be directed to enquiries@inforegulator.org.za, telephone 010 023 5200 or toll-free 0800 017 160. POPIA complaints may be sent to POPIAComplaints@inforegulator.org.za. The Regulator's official website should be checked for the current complaint form and contact details.