Privacy Policy
Last updated: 1 June 2025 · Questions? support@irunsa.co.za
1. Who We Are
iRunSA is a division of Felonk (Pty) Ltd ("Felonk", "we", "us") and operates the iRunSA athlete registration and results platform accessible at irunsa.co.za and as part of the broader Felonk ecosystem at felonk.co.za. Felonk (Pty) Ltd is the Responsible Party as defined under POPIA.
Contact:
Email: support@irunsa.co.za
iRunSA: https://irunsa.co.za
Felonk: https://felonk.co.za
2. Information We Collect
We collect information you provide directly and information generated by your use of the platform.
2.1 Information you provide
- Account details — full name, email address, password (stored hashed)
- Identity information — South African ID number or passport number (used for duplicate-athlete prevention and race-bib assignment)
- Athlete profile — date of birth, gender, club/school affiliation, province, country
- Profile media — profile photograph and cover image you upload voluntarily
- Payment information — processed by our third-party payment provider; iRunSA does not store card numbers
2.2 Information collected automatically
- Login timestamps and session identifiers
- Device type, browser and approximate location (for security logging only)
- Event registration and race-result history
3. How We Use Your Information
| Purpose | Lawful basis (POPIA) |
|---|---|
| Create and manage your athlete account | Contract performance |
| Process event entries and allocate race bibs | Contract performance |
| Publish race results and performance records | Legitimate interest / public record |
| Prevent duplicate registrations using ID/Passport | Legitimate interest |
| Send transactional emails (registration confirmation, password reset) | Contract performance |
| Send optional newsletters about iRunSA events | Consent (opt-in) |
| Improve platform security and detect fraud | Legitimate interest |
| Comply with legal obligations | Legal obligation |
We do not sell your personal information to third parties.
4. Sharing Your Information
We share your information only in the following circumstances:
- Event organisers — your name, bib number and result are shared with the organiser of events you enter
- Coaches / Representatives — if you were registered by a coach or representative they can view and update your athlete profile
- Service providers — cloud hosting (Microsoft Azure, South Africa North region), email delivery, and payment processing under strict data-processing agreements
- Legal requirements — where we are compelled by law, court order or regulatory authority
5. Data Storage & Security
Your data is stored on Microsoft Azure servers located in the South Africa North region. We apply industry-standard controls including encrypted data-at-rest, TLS in transit, access controls and regular security reviews. Passwords are stored as salted cryptographic hashes and are never readable by staff.
Despite our best efforts, no system is 100% secure. If you suspect unauthorised access to your account please contact support@irunsa.co.za immediately.
6. Retention
We retain your personal information for as long as your account is active. Race results and performance records are retained indefinitely as part of the public athletics record. Account data is deleted within 30 days of a verified deletion request, unless retention is required by law or for dispute resolution.
7. Your Rights (POPIA Section 5)
You have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — request correction of inaccurate or incomplete information
- Deletion — request deletion of your account and associated personal data
- Objection — object to processing based on legitimate interest
- Data portability — request your data in a machine-readable format
- Withdraw consent — opt out of marketing communications at any time
To exercise any of these rights, email us at support@irunsa.co.za with the subject line "POPIA Rights Request". We will respond within 30 days.
8. Cookies
iRunSA uses only strictly necessary cookies to maintain your authenticated session. We do not use tracking, advertising or analytics cookies. No cookie consent banner is required for strictly necessary cookies under POPIA.
9. Children
Athletes under 18 may be registered by a parent, guardian, coach or authorised representative. We do not knowingly collect personal information directly from children without appropriate adult consent. If you believe a child's information has been submitted without consent, contact support@irunsa.co.za.
10. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of iRunSA after a change constitutes acceptance. For material changes we will send a notice to your registered email address.
11. Contact & Complaints
For any privacy-related question, access request or complaint, contact us at:
support@irunsa.co.za