This is the privacy policy for the beyondbounds.co.za website, run by Beyond Bounds Digital, a company registered in South Africa (“Beyond Bounds”, “we”, “us”). It explains what the site records about a visit, why, who can see it, how long we keep it, and how to opt out or have it removed. It does not cover the Rushmark game, which has its own policy, or the Kantra application at app.kantra.co.za.
In short
- The site sets no cookies and loads no third-party analytics, advertising or social-media scripts.
- We run our own visit statistics. They record which pages are viewed and which buttons are clicked, against two random identifiers: one that lives for the browser tab, and one stored in your browser that is discarded after seven days without a visit. No name, email address or IP address is part of that record.
- You can switch the statistics off for your browser with the button at the bottom of this page.
- If you use the contact form or the WhatsApp button, you are choosing to send us your details, and we use them to reply to you.
- Raw analytics events are deleted after 24 months.
1. Who is responsible for your data
Beyond Bounds Digital is the “responsible party” under South Africa’s Protection of Personal Information Act (POPIA) and the “controller” under the EU and UK GDPR where those apply. Our privacy contact, and our Information Officer under POPIA, can be reached at info@beyondbounds.co.za.
2. Visit statistics
We want to know which pages get read and which buttons get clicked. Rather than hand that question to an advertising company, the site answers it itself: a small script on each page sends an event to our own server, and the server stores it in our own database. Nothing about your visit goes to anyone else.
2.1 What an event contains
- The kind of event: a page view, a button click, or the contact form being opened or submitted.
- The page address and title, and — for a page view — the address of the page that linked you here, if your browser provides one.
- Any campaign tags in the link you followed (the
utm_parts of an address), so we can tell which post or listing brought you. - The date and time, and your browser’s user-agent string (the browser and operating system name).
- Two random identifiers, described next.
An event does not contain your IP address, your name, an email address, anything you typed, or anything read from your device beyond the user-agent string. We do not fingerprint browsers.
2.2 The two identifiers
A session id is a random string created when you open the site in a tab and forgotten when that
tab closes (it lives in the browser’s sessionStorage). It lets us count a visit as one visit rather
than as five separate page views.
A visitor id is a random string stored in your browser’s localStorage, together with the time
it was last used. It lets us count a browser that comes back on Thursday as the same visitor it was
on Monday, so that “visitors this week” means browsers, not tabs. Seven days after its last use it is
discarded and the next visit starts a new one, so it can never link two visits more than a week
apart. It is not derived from you or your device, it is not shared with anyone, and it is not used
for anything other than these counts.
Neither identifier is a cookie, and neither is readable by any other website.
2.3 Opting out
Press Exclude this browser at the bottom of this page. From then on that
browser sends no events at all. The choice is stored in your browser — nothing is sent to us when
you press it — so it applies to every page and survives closing the browser; repeat it on each
browser or device you use, and the same button turns it back on. Opening any page with
?analytics=off at the end of the address does the same thing (?analytics=on undoes it). The site
works identically either way.
The site also does not send events for its privacy and account-deletion pages, on the view that someone reading how their data is handled is not a visit worth counting.
2.4 Who sees it, and for how long
Only Beyond Bounds staff can see the events, through a password-protected dashboard and a weekly summary email, and only in aggregate form: pages by views, referrers by visitors, clicks by button. Raw events are deleted automatically 24 months after they are recorded.
3. When you contact us
The contact form asks for your name, your email address, what you are enquiring about and a message. When you send it we store those details in our database, email them to ourselves, and send you a confirmation copy. We use them to reply to you and for nothing else. Emails are delivered through SMTP2GO, an email delivery service that processes them on our behalf. We keep enquiries so we can refer back to a conversation; write to us if you want yours deleted.
The WhatsApp button opens a chat with us in WhatsApp. From that point Meta’s WhatsApp terms and privacy policy apply to the conversation, in addition to this one.
4. Server logs
Like any web server, ours may keep short-lived technical logs of requests, which can include IP addresses. They are used only to keep the service running and secure, and are not combined with the visit statistics above.
5. Sharing
We do not sell, rent or share visitor data with anyone. The only third parties that handle it are the providers that run our infrastructure — the host that our server runs on, and SMTP2GO for email — and they do so on our instructions.
6. Your rights
Under POPIA, and under the GDPR where it applies, you can ask us what personal information we hold about you, ask for it to be corrected or deleted, and object to how it is used. Write to info@beyondbounds.co.za and we will respond within a reasonable time, normally within a month. If you are unhappy with our answer you can complain to South Africa’s Information Regulator at inforegulator.org.za, or to your local data-protection authority.
7. Children
The site is not directed at children under 18, and we do not knowingly collect personal information from them.
8. Changes
When this policy changes, the “Last updated” date at the top changes with it. Material changes will also be noted on this page for a period after they take effect.