Privacy Policy

Effective date: 22 September 2026

Victory Park Hebrew Congregation (“VPHC”, “we”, “us” or “our”) respects your privacy and is committed to processing personal information responsibly and in accordance with the Protection of Personal Information Act, 4 of 2013 (“POPIA”) and other applicable South African laws.

This Privacy Policy explains how we collect, use, store, share and protect personal information through our website, membership and community administration, events, donations, communications and related services.

1. Who we are

Victory Park Hebrew Congregation is an Orthodox Jewish congregation based at the King David Victory Park School Campus in Johannesburg, South Africa. Our website is https://vpshul.co.za/.

VPHC is the responsible party for personal information processed for the purposes described in this policy. For privacy enquiries or to contact our Information Officer, please email office@vpshul.co.za.

2. Personal information we may collect

Depending on your relationship with VPHC and how you use our services, we may collect:

  • identity and contact details, including names, email addresses, telephone numbers and postal or residential addresses;
  • membership, household and family information;
  • religious and community information reasonably required to administer synagogue membership, services, lifecycle events, pastoral support and communal activities;
  • event registrations, ticket purchases, attendance details and dietary or accessibility requirements;
  • donation, pledge, sponsorship and payment-related records;
  • communications, enquiries, consent choices and subscription preferences;
  • information relating to children where required for youth programmes, events or safeguarding;
  • photographs, video or other media associated with community activities, where appropriate;
  • website account details and information submitted through online forms;
  • technical information such as IP addresses, browser information, device information, security logs and cookies; and
  • any other information you voluntarily provide to us.

Payment card and banking information entered during an online payment is processed by the applicable payment service provider. VPHC does not ordinarily receive or store your complete card details, although we retain transaction references and related accounting records.

3. How we collect information

We may collect personal information directly from you, from a parent or guardian, from another household or community member acting with appropriate authority, through our website and forms, through event or membership administration, or from service providers that assist us with payments and administration. We may also generate records during our ordinary activities and communications.

4. Why we process personal information

We process personal information where it is lawful and reasonably necessary to:

  • administer membership, accounts and community records;
  • provide religious, communal, pastoral, educational and welfare services;
  • manage services, events, bookings, tickets, programmes and security arrangements;
  • process donations, pledges, sponsorships, purchases, payments and refunds;
  • issue receipts and maintain accounting, governance and statutory records;
  • respond to enquiries and communicate operational or community information;
  • send newsletters, invitations, fundraising communications or other updates where permitted;
  • maintain and secure our website, systems, premises and records;
  • prevent fraud, abuse, unlawful activity and security incidents;
  • protect the rights, safety and legitimate interests of VPHC, its members, visitors and the wider community; and
  • comply with legal, regulatory, contractual and governance obligations.

Our grounds for processing may include your consent, the performance of an agreement or requested service, compliance with a legal obligation, protection of legitimate interests as permitted by law, or another lawful justification under POPIA. Where we rely on consent, you may withdraw it, subject to legal or operational limitations.

5. Religious information and other special personal information

Religious beliefs and certain other categories of information are treated as special personal information under POPIA. As a religious community, VPHC may need to process information connected with Jewish identity, observance, membership, lifecycle events or pastoral matters. We limit this processing to legitimate religious and community purposes, obtain consent where required, apply appropriate safeguards, and do not disclose such information outside its intended purpose unless authorised or required by law.

6. Information about children

We may process children’s personal information for youth programmes, services, events, education, security, safeguarding and related administration. We seek the involvement or consent of a competent person, such as a parent or legal guardian, where required. Parents and guardians should provide only information reasonably necessary for the relevant activity and should contact us if information must be corrected or removed.

7. Online purchases, donations and payments

Our online store and payment facilities may collect information needed to process purchases, event tickets, donations and related transactions. Payment processing may be provided by PayFast or another payment provider. The payment provider processes payment information under its own privacy and security terms. We may receive confirmation, payment status, transaction identifiers and limited payer information required to reconcile and support the transaction.

8. When we share personal information

We do not sell personal information. We may share limited information with:

  • authorised VPHC office bearers, employees, volunteers and service coordinators who require it for their duties;
  • technology, hosting, email, backup, support, security, accounting and professional service providers;
  • payment processors and financial institutions involved in a transaction;
  • event, programme or security providers where necessary for the activity;
  • regulators, law-enforcement bodies, courts or other authorities where disclosure is required or permitted by law; and
  • other parties where you have authorised the disclosure.

Service providers are expected to process information only for the authorised purpose and to apply appropriate confidentiality and security safeguards.

9. International processing

Some technology or communications providers may process or store information outside South Africa. Where cross-border processing occurs, we take reasonable steps to use providers and arrangements that offer appropriate protection as contemplated by POPIA.

10. Cookies, logs and embedded content

Our website uses cookies and similar technologies that are necessary for functions such as account access, shopping baskets, checkout, security and user preferences. We may also record technical logs to operate, diagnose and protect the website.

Pages may contain embedded content or links from third parties, including social-media or video services. Those services may collect information according to their own privacy policies. You can restrict many cookies through your browser settings, although doing so may affect website functionality.

11. Communications and opting out

We may send membership notices, service information, newsletters, event invitations, fundraising appeals and other community communications. You may opt out of non-essential electronic communications by using an unsubscribe facility where provided or by contacting us. We may still send essential administrative, transactional, security or membership-related messages where lawful and necessary.

12. Photographs and community media

Photographs or recordings may be taken at communal events for historical, informational or promotional purposes. We take particular care regarding children and sensitive settings. If you have a concern about an identifiable image of you or your child, please contact us so that we can consider an appropriate restriction or removal.

13. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain appropriate historical and community records, to resolve disputes, or to meet legal, accounting, governance and security obligations. Retention periods differ according to the type of record. When information is no longer required, we take reasonable steps to delete, destroy or de-identify it, subject to lawful archival requirements.

14. How we protect information

We use reasonable technical and organisational safeguards designed to protect personal information against loss, misuse, unauthorised access, alteration or disclosure. These measures may include access controls, secure hosting, backups, monitoring, updates and limitations on who may access records. No system can be guaranteed completely secure, but we review safeguards and respond to identified risks.

15. Your rights

Subject to POPIA and other applicable laws, you may ask us to:

  • confirm whether we hold personal information about you;
  • provide access to your personal information;
  • correct or update inaccurate or incomplete information;
  • delete or destroy information that we are no longer entitled to retain;
  • object to particular processing;
  • withdraw consent where processing relies on consent; or
  • stop direct electronic communications.

We may need to verify your identity before acting on a request. Some requests may be limited where retention or processing is required by law, necessary to protect another person’s rights, or otherwise permitted under POPIA.

16. Privacy enquiries and complaints

Please first direct privacy questions, requests or complaints to the VPHC Information Officer at office@vpshul.co.za or contact the synagogue office using the details published on this website.

You may also contact or lodge a complaint with the Information Regulator (South Africa):

17. Changes to this policy

We may update this Privacy Policy when our activities, systems or legal obligations change. The effective date at the top of the page indicates the latest published version.