Legal

Privacy policy

How we handle personal information on Ringcraft OS, in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

Last updated 17 September 2026 / COACT Studio

01

Who is responsible

COACT Studio is the responsible party for personal information processed through Ringcraft OS and ringcraft.co.za. COACT Studio also acts as Information Officer and can be reached at hello@coact.co.za.

02

What we collect

  • Fighter account information - email address and sign-in details used to create and secure an invited fighter account.
  • Fighter profile information - the details a fighter enters themselves, such as name, nickname, division, trainer, gym, biography, support needs and journey progress.
  • Enquiry information - the name, email address and message content sent to us by sponsors, partners or supporters.
  • Technical information - essential cookies, basic device and browser information, and security and error logs.

We do not knowingly collect information from children without parental or guardian consent.

03

Why we process it, and on what basis

  • To create and operate fighter accounts and the fighter workspace - performance of our agreement with the fighter.
  • To publish the fighter profile information a fighter chooses to make public - consent.
  • To respond to sponsorship and partnership enquiries - our legitimate interest in answering you.
  • To keep the platform secure, prevent abuse and fix faults - our legitimate interest and legal duties.
  • To meet record-keeping obligations imposed by law.

Where processing rests on consent, you may withdraw that consent at any time.

04

Public profile information

Ringcraft OS publishes fighter pages. Any profile field a fighter marks as public, including record, trainer and support needs, appears on the public website and can be seen and indexed by anyone. Fighters control which fields are public and can change or remove them at any time.

05

Who we share it with

We do not sell personal information. We share it only with the service providers that run the platform on our behalf, namely our hosting, database, authentication and email providers, and only to the extent needed to deliver the service. These operators are bound to keep the information confidential and secure. We may also disclose information where the law requires it.

06

Cross-border processing

Some of our providers store or process information on servers outside South Africa. Where that happens we rely on providers that are subject to laws or binding contractual terms giving protection substantially similar to POPIA, as section 72 requires.

07

Security and retention

Access to accounts is invitation-only and protected by authentication, role separation and database-level access rules. We keep personal information only as long as needed for the purposes above or as the law requires, and then delete or de-identify it. If a security compromise affects your personal information, we will notify you and the Information Regulator as POPIA requires.

08

Your rights

  • Ask what personal information we hold about you and request a copy.
  • Ask us to correct, update or delete information that is wrong, misleading or no longer needed.
  • Object to processing, or withdraw consent where consent is the basis.
  • Ask us not to use your details for direct marketing.
  • Complain to the Information Regulator of South Africa.

To exercise any of these, email hello@coact.co.za. We may ask you to confirm your identity before acting on a request. You may also make a formal request under PAIA - see the PAIA notice.

09

Cookies

We use essential cookies only. See the cookie notice for detail.

10

Changes

We may update this policy as the platform develops. The date at the top shows when it last changed. Material changes will be announced on the platform updates page.