Privacy

Peak Software Pty Ltd is the responsible party for the information on this site, as that term is used in the Protection of Personal Information Act (POPIA).

Anything at all about your information: hallo@mnrdebeer.com. A person reads it.

If you reserve a bear: your name, your email address, which language you want the bear to speak, which language you were reading the page in, and the date and time you submitted the form. That is the whole list.

We do not collect your address, your phone number, your payment details, your child's name, your child's age or a photograph. There is nothing on this page that asks for them, and there is no reason for us to hold them in order to tell you that a bear is ready.

We send you one email when the first batch is ready. That is the purpose you gave it to us for and it is the only thing we may lawfully use it for.

Not a newsletter. Not a "still interested?" reminder. Not a Black Friday offer. If we ever want to send you something else, we have to ask you first, in a separate and obvious way.

We do not sell your address, we do not rent it, and we do not upload it to an advertising platform as a custom audience. That is a different purpose and you did not agree to it.

In Google Cloud Firestore, in Johannesburg (region africa-south1). We chose a South African region deliberately: your details stay in the country, so none of this involves sending your information abroad for storage.

Access is limited to the people running this project.

One company. When you reserve a bear, an email is sent to us so that a person knows to reply. That email is delivered by Resend (resend.com), which processes your name and email address on our instruction and for nothing else. Resend's servers are outside South Africa, so this one step does involve a cross-border transfer, which POPIA requires us to tell you.

Nobody else. No advertising platform, no analytics company, no mailing-list provider, and no other business gets your details.

This site runs no analytics, no advertising pixel, no session recording and no third-party scripts of any kind. It sets no cookies. Nothing about your visit is recorded unless you submit the form.

If that changes — and if we advertise this product it probably will — this section changes with it, in the same update. We would rather describe a tracker honestly than pretend we do not have one.

Until the launch email has gone out and the first batch has shipped, and then no longer than 12 months after that. After that the list is deleted.

If you ask us to delete your details sooner, we do it and we do not keep a copy.

Under POPIA you may ask us what we hold about you, ask us to correct it, ask us to delete it, or object to us holding it at all. Email hallo@mnrdebeer.com and we will do it — there is no form and no process.

Every email we send has a one-click unsubscribe, and it works.

If you are not satisfied with how we have handled your information you may complain to the Information Regulator of South Africa at inforegulator.org.za.

This site is for the adult buying the bear. We do not knowingly collect information about a child here, and we do not ask for any.

The app that comes with the bear follows the same rule and goes further. A story a parent records in the app, in their own voice, is stored on that phone and transferred to the bear directly. It is never uploaded to us. There is no copy of it for us to lose, hand over or be asked about.

There is one other way a recording can arrive, and we would rather describe it than let the sentence above cover it. A parent can send a link to someone else — a grandmother in another town — so she can record on her own phone, in a browser. That recording does pass through us. It is encrypted in her browser before it reaches us, with a key that exists only in the link the parent sent her, so what we receive is a file we cannot listen to. It is deleted as soon as the parent's phone has collected it, and deleted automatically after 14 days whether it was collected or not.

We are not claiming more than that. The page she records on comes from us, so this protects the recording against an accident, a leak, a stolen backup or a request for it — it is not a guarantee against us if we ever changed that page. That is the honest limit of it, and it is why the file does not stay.

We never ask for her name, her number or her email address, and we do not store them. The parent sends the link themselves. All we hold is that someone opened a link and sent a file, how long it is and how large it is.