Privacy notice
Last updated 10 October 2026
We collect only the information needed to verify that you live in your community and to help you borrow, lend, buy, sell and coordinate with neighbours. Your phone number and unit are never shown to other residents unless you choose to share them. Sensitive information, such as health details for emergency support, is only collected with your explicit consent and is visible only to designated responders. You can view, download, correct or delete your information at any time in Settings, or by contacting our Information Officer.
Who we are
SharedList is operated by Ndumiso Makhanya, trading as SharedList, in Johannesburg, South Africa. We are the responsible party for the personal information described in this notice under the Protection of Personal Information Act, 2013 (POPIA).
Our Information Officer is Ndumiso Makhanya, who can be reached at info@makhanya.com.
What this notice covers
This notice explains what we collect when you use this website and the SharedList app, why we collect it, who sees it, how long we keep it, and the choices you have.
What we collect on this website
This website has no accounts, no analytics and no advertising, and it sets no cookies. The only information we collect is what you choose to send through the demo request form:
- Your name and email address, so we can reply to you.
- Your community's name, its approximate number of units and your role, so we can prepare for the conversation.
We use this only to arrange and follow up the walkthrough you asked for. We do not add you to a marketing list unless you ask to join one. The form is checked for automated submissions by Cloudflare Turnstile, and the request is delivered to our mailbox as an email through Resend. Neither keeps a copy beyond what is needed to deliver it.
What we collect in the app
When your community joins SharedList, we collect only what is needed to confirm that you live there and to help you borrow, lend, buy, sell and coordinate with neighbours:
- Your name, phone number and unit or address, matched to the roster your trustees or managing agent supply.
- The requests, listings, bookings, offers and messages you create, and the records of completed exchanges that build your reputation.
- Payment references from our licensed payment provider when you choose to pay in the app. We never store card numbers.
- Your notification and directory preferences.
Your phone number and unit are never shown to other residents unless you choose to share them. The app works at zone or unit level and never stores your precise location.
Sensitive information
Some features, such as the vulnerable residents register, ask for health or care details. We collect these only with your explicit consent, show them only to designated responders, and record every time they are viewed. You can withdraw consent at any time, and the details are then deleted.
Children
Members under 18 are added only by the adult who holds their household account, with that adult's consent, and have restricted features.
Who we share it with
We never sell personal information. We share it only with:
- Your community's trustees, estate manager or managing agent, for the roster and for the notices and decisions they administer.
- Suppliers that process information on our behalf, such as hosting, SMS and email delivery, WhatsApp messaging, identity checks and payments. Each is bound by an operator agreement under section 21 of POPIA.
- Municipalities or utilities, as aggregated and anonymised outage statistics only, never as information about individuals.
- Authorities, where the law requires it.
Where it is stored
We prefer to store information in South Africa. Where a supplier processes information outside the country, we make sure the transfer meets section 72 of POPIA.
How long we keep it
- Demo requests: until the conversation has concluded, and no longer than 12 months.
- Transaction records: five years, the period financial records must be kept by law.
- Listings and messages: deleted after 12 months of inactivity.
- Accounts of residents who leave: archived for 90 days, then deleted.
Your rights
You can at any time:
- See the information we hold about you and download a copy.
- Correct it.
- Ask us to delete it, apart from records we must keep by law.
- Object to processing, and withdraw any consent you have given.
- Complain to the Information Regulator if you are unhappy with how we respond.
In the app, use Settings. Otherwise write to our Information Officer at the address above. We respond within 30 days.
Security
Information is encrypted in transit and at rest, access is limited by role and logged, and photo metadata such as location is removed on upload. If a breach ever affects your information, we will tell you and the Information Regulator as section 22 of POPIA requires.
Direct marketing
We send marketing messages only to people who have opted in, and every message has a way to opt out.
PAIA manual
The Promotion of Access to Information Act, 2000 (PAIA) gives you the right to request records we hold. Our manual sets out how to make a request, the fees that apply and how we respond.
Requests go to the Information Officer, Ndumiso Makhanya, at info@makhanya.com. We hold records about demo enquiries, community subscriptions, member accounts and the exchanges made in the app. Use the request form prescribed under PAIA, which we will send on request, and say which records you want and how you would like to receive them. Fees are charged only as the Act prescribes, and we respond within 30 days.
Changes to this notice
If this notice changes in a way that affects you, we will tell you in the app or by email before the change takes effect.