Who We Are
Site name: StreetSignal (streetsignal.co.za)
Description: Neighbourhood data platform for Cape Town, South Africa
Operator: Personal project operated by Kuziva Muzondo, an individual based in the United Kingdom
Contact: streetsignal@gmail.com
Website: https://streetsignal.co.za
POPIA role: Responsible party
UK GDPR role: Data controller
What Information We Collect
| Data Element | Collected By | Purpose |
|---|---|---|
| IP address | Cloudflare (hosting provider) | Security, DDoS protection, basic analytics |
| Page request metadata (URL, timestamp, browser type) | Cloudflare | Site performance and security |
| Dark mode preference | Your browser (localStorage) | Remembering your display preference |
We do not collect your name, email address, phone number, or any other directly identifying information. We do not require user accounts, and there are no contact forms or newsletter signups on this site.
How We Use Your Information
IP address and request metadata are processed by Cloudflare to:
- Serve web pages from the nearest data centre
- Protect the site from malicious traffic and denial-of-service attacks
- Generate anonymous, aggregated usage statistics (e.g. total page views, most visited pages)
We do not sell, rent, or share your personal information with any third party for marketing purposes.
Our Lawful Basis for Processing
Under POPIA
We process limited personal information (IP addresses collected by our hosting provider) on the basis that this processing is necessary to pursue the legitimate interests of the responsible party, specifically the security and operation of the website.
Note: The precise lawful basis under POPIA for passive IP address collection by a hosting provider is an evolving area of South African data protection law. The most relevant provisions are Sections 11(1)(d) (protecting a legitimate interest of the data subject) and 11(1)(f) (processing necessary for pursuing the legitimate interests of the responsible party or a third party to whom the information is supplied). We will update this section if guidance from the Information Regulator clarifies this position.
Under UK GDPR
Article 6(1)(f) — legitimate interests. Our legitimate interest is operating and securing the website. This processing is minimal and proportionate — we collect no more data than Cloudflare requires to serve web pages and protect against attacks.
Third Parties Who Process Your Data
| Service | Purpose | Data Processed | Privacy Policy |
|---|---|---|---|
| Cloudflare Pages | Hosting, CDN, security | IP address, request metadata | cloudflare.com/privacypolicy |
| Carto | Map tile rendering | Standard HTTP request headers (IP address, user agent) | carto.com/privacy |
| GitHub | Source code hosting (public repo) | No user data | docs.github.com |
We do not use Google Analytics or any advertising tracking. If analytics or advertising services are added in future, this policy will be updated before they are activated.
International Data Transfers
Cloudflare's global network includes servers in South Africa, Europe, and other regions. Data may be processed in any country where Cloudflare operates. Cloudflare maintains appropriate safeguards for international data transfers, including Standard Contractual Clauses approved by the European Commission.
The site operator is based in the United Kingdom. Data processed in the UK is protected by the UK GDPR and the Data Protection Act 2018.
Data Retention
Cloudflare retains request logs for a limited period as part of its standard operations. We do not independently store any personal data beyond what Cloudflare retains.
The dark mode preference stored in your browser's localStorage persists until you clear your browser data. This data never leaves your device.
Your Rights
Under POPIA (for South African data subjects)
- Right to access: You may request confirmation of whether we hold personal information about you and, if so, a copy of that information (Section 23)
- Right to correct: You may request correction of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, or misleading (Section 24)
- Right to object: You may object to processing of your personal information on reasonable grounds (Section 11(3))
- Right to complain: You may lodge a complaint with the Information Regulator
Under UK GDPR (for UK data subjects)
- Right of access: You may request a copy of your personal data (Article 15)
- Right to rectification: You may request correction of inaccurate data (Article 16)
- Right to erasure: You may request deletion of your data in certain circumstances (Article 17)
- Right to restrict processing: You may request that we limit how we use your data (Article 18)
- Right to object: You may object to processing based on legitimate interests (Article 21)
To exercise your rights, contact: streetsignal@gmail.com
Regulatory Contacts
South African Information Regulator:
- Website: inforegulator.org.za
- Email: enquiries@inforegulator.org.za
UK Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Telephone: 0303 123 1113
Cookies and Storage Technologies
StreetSignal does not set cookies. However, the following storage technologies are used:
localStorage (dark mode)
When you toggle dark mode, your preference is saved in your browser's localStorage. This data never leaves your device and is not transmitted to our servers. We believe this qualifies as "strictly necessary" for providing the service you requested (a display preference) under PECR Regulation 6(4), and therefore does not require consent.
The UK ICO has not issued specific guidance on display preference storage; if guidance changes, we will update this section accordingly.
Cloudflare security
Cloudflare may set cookies for bot management and security purposes (e.g. __cf_bm). These are strictly necessary for the security of the site and are exempt from consent requirements.
If we add analytics or advertising services in future, we will update this section and implement a consent mechanism before activating any non-essential cookies or tracking.
About the Data We Display
The neighbourhood data displayed on StreetSignal (population figures, crime statistics, school information, etc.) is aggregated, de-identified statistical information sourced from South African government agencies. This data does not constitute personal information under POPIA Section 6(1)(b), as no individual can be identified from suburb-level statistics.
For details on our data sources and methodology, see our Data Sources and Methodology pages.
Changes to This Policy
This policy may be updated from time to time. The "Last updated" date at the top of this page will reflect the most recent changes. Material changes will be noted on the homepage.
Information Officer
In terms of POPIA Section 55, Kuziva Muzondo, the operator of StreetSignal, serves as the designated Information Officer.
Contact: streetsignal@gmail.com
The Information Officer is responsible for encouraging compliance with POPIA, dealing with requests from data subjects, and cooperating with the Information Regulator.