Privacy policy

01Who is responsible for your information

Midpoint Hub and its FOND, Gym, Padel and Functions services are operated by Blend Property 20 (Pty) Ltd, registration 2016/031577/07. In this policy, “we”, “us” and “our” mean that company in respect of information under its control. Our business contact address is Midpoint, 162 Tonetti Street, Halfway House, Midrand, 1685, South Africa.

Our designated privacy contact is Mark Corbishley: legal@blendproperty.co.za. Please identify Midpoint Hub and the relevant service when writing. You can also contact the service team listed below. This notice covers visitors, customers, account holders, membership applicants, event participants and people making enquiries through midpointhub.com and its installed web app.

02What we collect and why

Optional FOND delivery pin: when you tap Use my location, your browser asks for location permission. You must confirm the pin before it is submitted with your order. FOND stores the coordinates and reported accuracy with the delivery order for authorised staff to fulfil it; this is a single location capture, not continuous tracking. You can remove the pin before ordering and use your business and building details instead. Opening a pin preview or directions in Google Maps shares those coordinates with Google under its own privacy information.

FOND orders: your name, chosen items and options, order notes, collection or delivery selection, time, and relevant telephone, email, company and building details. We use these to prepare and fulfil orders, resolve problems and send the service updates you request. Order and payment references, amounts, status, refunds and reward records support reconciliation and customer service.

FOND accounts: email address, a protected password record, verification and session records, and order history associated with the account. If you enable additional account security, we process the chosen email or mobile destination, verification challenges and recovery records. Loyalty features use qualifying purchase and redemption records; an account does not automatically opt you into marketing.

Gym and Padel signup: first name, surname, email, mobile number, ID or passport number and the relevant company, building or tenant details requested by the form. These help the team review your application, distinguish applicants and arrange the relevant membership or tenant setup. Padel may also ask whether you already have a Playtomic account. Event-interest forms collect the details needed for the chosen event and follow-up.

Functions: requested date, guest count, gathering style, contact person, email and telephone, with optional company, theme and budget details. Michelle’s team uses these to discuss availability, prepare a proposal and manage the enquiry and any agreed function. The public calendar displays unavailable dates, not customer names or event details.

Support and security: correspondence, staff handling notes, changes to requests, notification delivery records and relevant technical logs. Hosting systems may process IP addresses and browser/request information to serve the app, diagnose failures and protect it against misuse. Staff access and changes are recorded for accountability.

03How information reaches us and your choices

Most information comes directly from you through forms, orders, account controls and correspondence. We may also receive relevant information from an authorised representative, our service team or a payment or communications provider, such as a transaction result or delivery status. Please only give another person’s details when you are authorised to do so and make this policy available to them.

Required fields are identified on each form. Without those details we may be unable to process the online request or supply the requested service. Company, theme and budget are optional on the Functions form. Contact the relevant team if you need assistance or wish to discuss an alternative to submitting information online.

The Hub signup form asks for an identity number, not an uploaded identity document or facial photograph. Do not put identity copies, banking credentials, passwords, medical histories or other unnecessary sensitive information in free-text fields or ordinary email. The Hub form does not enrol you in facial recognition. Any separate access-control collection needs its own appropriate notice and process.

04Purposes and lawful processing

We process relevant information to take steps you request before an agreement, perform an agreed service, administer orders and accounts, protect legitimate operational and security interests, meet legal obligations, and act on valid consent where that is the appropriate basis. The basis depends on the particular purpose; this policy does not seek unlimited consent for every use.

Submitting a Gym, Padel or Functions enquiry authorises the requested follow-up; it is not marketing consent, proof of payment, a confirmed booking or membership activation. Staff review Hub applications. Automated form validation, duplicate protection and date availability checks help operate the service but do not themselves approve membership or a function.

05Who can receive information

Relevant service staff and authorised administrators can access the information needed for their duties. Hub requests are restricted by service role, with authorised owner oversight. Identity numbers and Functions enquiry details are encrypted in the Hub database. Signup notification emails omit the ID or passport number.

Hosting and technical support, email and message delivery, payment and accounting providers may process information needed for their functions. Depending on the feature in use, these include hosting/mail services, Yoco for hosted payments, and configured email, SMS or WhatsApp delivery services. Card credentials are entered with the hosted payment provider, not into a Hub enquiry form; we use transaction references and status for reconciliation.

Playtomic operates the external court-booking service. Following its link opens a separate service with its own terms and privacy information. Itensity is used for the Gym membership process completed with the team. A Hub request does not itself create a membership or activate access on either platform. The team can explain any further information needed before completing that setup.

Disclosures to advisers, insurers, auditors, regulators, courts or law-enforcement bodies must be justified by the relevant service, legal obligation or claim. Providers acting on our instructions must be subject to appropriate confidentiality and security obligations. We do not sell your personal information or treat use of the Hub as permission for unrelated sharing.

06Retention, security and overseas processing

Optional delivery pins remain part of the order record under the order-retention arrangements below. They are not saved in your browser’s recent-order list. That list stores up to ten order references for thirty days on your device to restore tracking after you leave or reload; clearing this site’s browser data removes it. Anyone using the same browser profile may be able to view those saved references and the order status they unlock.

Retention depends on the record and purpose. Enquiries and application details should be kept only for justified handling, follow-up, security and dispute needs. Order, payment and accounting records may need to remain for applicable legal and financial periods. Account and preference records support the ongoing service; limited evidence may remain after closure where lawfully necessary.

There is no promise that every record is automatically deleted after a fixed number of days. Contact Mark for the retention position applicable to your record or to request deletion. Information no longer lawfully needed must be deleted or de-identified. Legal holds and necessary audit evidence are assessed separately. Backup expiry and deletion from external providers are separate from removal from the live Hub.

We use access controls and secure connections and restrict staff handling of personal information. Keep your account credentials private and tell us promptly about suspected misuse. No online system can eliminate every risk. Security incidents must be assessed and reported to affected people and the Information Regulator where required by POPIA.

Hosting, support, payment or communications providers may process information outside South Africa. Any transfer must have a lawful basis and the safeguards required by POPIA. Ask our privacy contact about the recipients, countries and protections relevant to the service you use; this notice does not claim that every provider stores all data in South Africa.

07Cookies, app storage and messages

The app uses functional session cookies for sign-in and authorised access. Browser session storage helps prevent duplicate submissions and remembers whether an in-app promotion has already appeared. Staff devices can retain sound and notification preferences. Installing the PWA adds a convenient launch icon; it does not by itself subscribe you to marketing or grant access to your contacts or location.

You can clear cookies and site data in your browser, although doing so may sign you out or reset preferences. Device notification permissions can be changed in the browser or operating-system settings. The current app does not include third-party advertising pixels or a cross-site advertising cookie programme. A separate notice and any required choice must accompany such tools if introduced.

Order updates, verification codes and replies to your enquiry are service communications. Available order-notification channels are shown at checkout; an unavailable provider is not a promise of delivery. Promotional messaging requires a separate lawful basis and an opportunity to opt out. You can withdraw a marketing choice through the message instructions or our privacy contact without cancelling your underlying enquiry or account.

08Children and sensitive details

A parent or guardian should contact the relevant team before supplying a child’s details or arranging participation. Do not use a general enquiry field to submit children’s identity documents, health records or biometric information. If information has been submitted without proper authority, tell our privacy contact so it can be reviewed.

For catering, discuss allergies and dietary requirements directly with FOND or Michelle before confirming an order or event. Give only the information necessary to handle the requirement, and avoid identifying guests where an anonymous dietary count is sufficient. Special personal information requires an appropriate lawful basis and safeguards.

09Your rights and complaints

You may request confirmation of information held about you, access, correction, or deletion where permitted; object to applicable processing; and withdraw consent for future consent-based use. Some records may lawfully need to remain. We will explain the reason if a request cannot be met in full. Reasonable identity and authority checks protect your records from disclosure to someone else.

Write to legal@blendproperty.co.za, for Mark Corbishley, stating the service, your request and a safe contact method. Include an order or enquiry reference if available, but do not send passwords or verification codes. We will explain any formal access procedure, permissible fee or applicable extension. This privacy policy is not a PAIA manual; you can request assistance with formal access to records from the same contact.

You may complain to the Information Regulator without first accepting our response. Its current complaint channels and forms are at inforegulator.org.za/complaints/. General enquiries: enquiries@inforegulator.org.za or 010 023 5200.

10Changes to this policy

The edition date identifies this notice. Material changes will be communicated through an appropriate channel. Updating a notice does not create consent for a new purpose where consent is required, or retrospectively change an agreement you already accepted.

Speak to the right person

For privacy and legal requests: Mark Corbishley · legal@blendproperty.co.za

Information Regulator: complaints and forms ↗