Privacy Policy

Musket Goose (Pty) Ltd ("Musket Goose", "we", "us", "our") respects your privacy and is committed to protecting personal information in line with the Protection of Personal Information Act, 2013 (POPIA) and other applicable laws in Republic of South Africa.

This Privacy Policy explains how we collect, use, store, share, and protect personal information when you visit musketgoose.com (and related Musket Goose marketing pages), contact us, or use our internal operator dashboard if you are an authorised team member.

Our portfolio products — including QueueGoose and SmartCram — are operated on their own domains and may have separate privacy notices. When you sign up for or use a product, that product's policy applies to account and product data. This policy covers the Musket Goose corporate website and operator platform.

The responsible party (operator) for personal information processed through this website is Musket Goose (Pty) Ltd, based in Cape Town, South Africa.

For privacy, data protection, and POPIA-related requests, contact our Information Officer at jackspence.dev@gmail.com.

• Operate, maintain, and improve musketgoose.com and the operator dashboard.
• Respond to enquiries about partnerships, press, careers, or general contact.
• Monitor site performance, security, and aggregated usage trends.
• Authenticate authorised operators and maintain audit trails for internal governance.
• Comply with legal obligations and enforce our Terms of Use.

Under POPIA we rely on one or more of the following, depending on context:

• Consent — where you voluntarily contact us or opt in to communications.
• Legitimate interest — to secure our systems, understand aggregated website usage, and run our business, balanced against your rights.
• Contract — where processing is necessary to provide access to the operator platform for authorised users.
• Legal obligation — where we must retain or disclose information to comply with law.

We do not sell personal information. We share data only with trusted service providers who help us run the website and internal systems, and only to the extent needed for their services:

• Vercel — hosting, deployment, and infrastructure.
• Neon — database hosting for operator/governance data when DATABASE_URL is configured.
• Umami Cloud — privacy-focused website analytics.
• Email and communication providers — when you contact us by email.
• Providers may process data outside South Africa; we take reasonable steps to ensure appropriate safeguards where required.
• We may disclose information if required by law, court order, or to protect rights, safety, and security.

We retain personal information only for as long as necessary for the purposes described in this policy, unless a longer period is required by law.

Analytics data is kept in aggregated form according to our analytics providers' retention settings. Operator account and governance records are retained while accounts are active and for a reasonable period thereafter for security and legal compliance.

We implement appropriate technical and organisational measures to protect personal information, including HTTPS encryption, access controls on the operator dashboard, hashed passwords, and least-privilege access for team members.

No method of transmission or storage is completely secure. If you believe your interaction with us has been compromised, contact us promptly at the address above.

Subject to POPIA and applicable exceptions, you may have the right to request access, correction, deletion, restriction, or objection to processing; withdraw consent where applicable; and lodge a complaint with the Information Regulator (South Africa) at inforeg@justice.gov.za.

To exercise your rights, email jackspence.dev@gmail.com. We may need to verify your identity before responding.

• Request access to personal information we hold about you.
• Request correction or deletion of inaccurate or outdated information.
• Object to processing or request restriction in certain circumstances.
• Withdraw consent where processing is based on consent.

musketgoose.com is a corporate website and is not directed at children under 18. Our portfolio products may have their own age requirements. If you believe a child has provided us personal information without appropriate consent, contact us and we will take reasonable steps to delete it.

Our site links to QueueGoose, SmartCram, and other external services. Those sites are operated by us or our partners under separate terms and privacy policies. We encourage you to read each product's policy before creating an account or submitting personal information.

We may update this Privacy Policy from time to time. The effective date at the top of this page will change when we do. Material changes may also be noted on the website. Continued use of the site after updates constitutes acceptance of the revised policy.

Musket Goose (Pty) Ltd

Cape Town, South Africa

Privacy & legal enquiries: jackspence.dev@gmail.com