1. Introduction
Bruinou.com (“we”, “our”, “us” or “the Website”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the rights you have in relation to it.
This Privacy Policy applies to all visitors and users of the Website. It is aligned with the South African Protection of Personal Information Act, 2013 (“POPIA”) and, where applicable, the European Union General Data Protection Regulation (“GDPR”).
By using the Website you consent to the processing of your personal information as described in this Privacy Policy.
2. Who We Are
Bruinou.com is a South African community news, culture and entertainment media platform operated by the Bruinou.com editorial team.
Contact for privacy and data-related enquiries: editor@bruinou.com
3. Information We Collect
3.1 Information You Provide Directly
- Account information: When you register, we collect your username, email address and any profile information you choose to provide.
- Comments and submissions: When you post a comment or submit content, we collect the information contained in your submission, including your name and email address.
- Contact form: When you use our contact form, we collect your name, email address and the contents of your message.
- Community features: When you use our community features (including forums and groups), we collect the information you post.
3.2 Information Collected Automatically
- Log data: Our servers automatically record information such as your IP address, browser type, operating system, referring pages and the date and time of your visit.
- Cookies and similar technologies: We use cookies and similar technologies to remember your preferences, understand how the Website is used, and improve your experience. See section 6 below.
- Spam protection: When you leave a comment, we may collect your IP address and browser user agent string to help detect and prevent spam, and an anonymised string created from your email address (a hash) may be provided to the spam detection service (Akismet) to determine whether it is associated with spam activity.
3.3 Information We Do Not Collect
We do not intentionally collect special categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs or health data), except where you choose to share such information in content you publish on the Website. By publishing such content, you acknowledge that it will be publicly accessible.
4. Legal Bases for Processing
We process personal information on the following legal bases:
- Consent: Where you have given us clear consent to process your personal information for a specific purpose (for example, to create an account or subscribe to communications).
- Contract: Where processing is necessary to perform a contract with you, or to take steps at your request before entering into a contract.
- Legitimate interests: Where processing is necessary for our legitimate interests (for example, to operate and secure the Website, prevent fraud and spam, and understand how the Website is used), provided your interests and fundamental rights do not override those interests.
- Legal obligation: Where processing is necessary to comply with a legal obligation to which we are subject.
5. How We Use Your Information
We use the personal information we collect to:
- Provide, operate and maintain the Website and its features;
- Create and manage your account;
- Process and publish your comments and submitted content;
- Respond to your enquiries and provide support;
- Detect, prevent and address spam, fraud, abuse and security threats;
- Understand how visitors use the Website and improve our content and services;
- Comply with legal obligations; and
- Where you have consented, send you communications about the Website.
6. Cookies and Similar Technologies
A cookie is a small text file stored on your device when you visit a website. We use the following types of cookies:
| Cookie type | Purpose | Duration |
|---|---|---|
| Essential / functionality | Required for the Website to function, such as remembering your login and preferences. | Session / persistent |
| Analytics and performance | Help us understand how visitors use the Website (e.g. which pages are popular) so we can improve it. | Persistent |
| Advertising and social | Used by advertising and social media features to serve relevant content and measure engagement. | Persistent |
| Third-party | Set by services we integrate, such as video embeds (e.g. YouTube) and social media sharing buttons. | Varies |
You can control and/or delete cookies as you wish through your browser settings. You can delete all cookies already on your device and set most browsers to prevent them from being placed. However, if you disable cookies, some parts of the Website may not function correctly.
Third-party services (such as YouTube, Facebook, Twitter and others) may set their own cookies. We encourage you to review their respective privacy policies.
7. Information Sharing and Disclosure
We do not sell your personal information. We share personal information only in the following circumstances:
- Service providers: With trusted third-party service providers who assist us in operating the Website (for example, hosting providers, spam detection services and analytics providers), subject to appropriate contractual safeguards.
- Legal requirements: When required by law, regulation, legal process or governmental request, or where necessary to protect our rights, safety or property, or the rights, safety or property of others.
- Business transfers: In connection with a merger, acquisition, reorganisation or sale of all or a portion of our assets.
- With your consent: Where you have given us explicit consent to share your information.
8. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:
- Account information is retained while your account is active and for a reasonable period thereafter.
- Comments and submitted content are retained until you request their removal or we remove them in accordance with our Terms and Conditions.
- Log data is retained for a limited period to maintain security and diagnose issues.
9. Your Rights
Depending on your location and applicable law (including POPIA and GDPR), you may have the following rights:
- Right of access: To request a copy of the personal information we hold about you.
- Right to rectification: To request that we correct inaccurate or incomplete information.
- Right to erasure: To request that we delete your personal information, subject to legal obligations.
- Right to restriction: To request that we restrict processing of your personal information in certain circumstances.
- Right to data portability: To receive your personal information in a structured, commonly used and machine-readable format.
- Right to object: To object to processing based on legitimate interests.
- Right to withdraw consent: To withdraw your consent at any time where processing is based on consent.
- Right to complain: To lodge a complaint with the relevant supervisory authority (in South Africa, the Information Regulator).
To exercise any of these rights, please contact us at editor@bruinou.com. We will respond within 30 days as required by POPIA. We may ask you to verify your identity before responding to your request.
10. Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction, including encryption of data in transit (SSL/TLS), access controls and security monitoring.
Please note that no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
11. International Transfers
Some of our service providers may be located outside South Africa. Where personal information is transferred outside South Africa, we take steps to ensure that appropriate safeguards are in place to protect your information, consistent with POPIA and, where applicable, GDPR requirements.
12. Children’s Privacy
The Website is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe that we have collected personal information from a child under 13, please contact us and we will take steps to delete the information.
13. Automated Decision-Making
We do not engage in automated decision-making, including profiling, that produces legal or similarly significant effects on you.
14. Third-Party Links
The Website may contain links to third-party websites. This Privacy Policy does not apply to third-party websites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party websites you visit.
15. Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where the breach is likely to result in a high risk, we will notify affected individuals, in accordance with POPIA and GDPR requirements.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post any changes on this page and update the “Last updated” date. Material changes will be highlighted where reasonably possible. Your continued use of the Website after changes are posted constitutes your acceptance of the revised Privacy Policy.
17. Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal information, please contact us at:
Email: editor@bruinou.com
You also have the right to lodge a complaint with the Information Regulator of South Africa:
Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: complaints.IR@justice.gov.za
Last updated: 6 September 2026