1. Who is responsible for your information
DropCatcher is operated by Astros Marketing (Pty) Ltd, based in Claremont, Cape Town, and provides expiring domain monitoring and acquisition support to South African registrants. For privacy matters, the responsible party is the operator, and our team manages information in accordance with POPIA and any other applicable South African law.
If you need to reach us about privacy, email domains@dropcatcher.co.za. We may ask for enough detail to confirm your identity before dealing with your request.
2. What information we collect
We collect only information needed to deliver our services, manage accounts and communicate with you about monitored domains, alerts and requests. This may include:
- Name, company name and role
- Email address, phone number and billing details
- Domain names, watch lists, backorder instructions and portfolio notes
- Login and account activity records
- Communication records, including support emails and service updates
- Technical data such as IP address, browser type and access timestamps
Where you provide information about other people in your business, you confirm that you have the authority to do so.
3. How we use personal information
We use your information to provide expiry monitoring, send renewal reminders, place backorders, track release windows, prepare reports and respond to support queries. We also use it to verify instructions, maintain service records and improve our internal processes.
We do not use personal information for unrelated purposes without a lawful basis. In some cases, we may use it to prevent fraud, manage security incidents or comply with legal and regulatory duties.
- Account administration and billing
- Service delivery and client support
- Alert delivery and reporting
- Compliance, audit and dispute handling
4. Sharing and disclosure limits
We do not sell personal information. We may share limited data with service providers who assist with hosting, email delivery, payment processing, analytics or technical support, but only where they are bound to keep information confidential and use it for the agreed purpose.
We may also disclose information if required by law, a court order, a competent authority or where disclosure is necessary to protect our rights, our systems or our clients. Some domain-related processes may involve registries or registrars outside South Africa, and information may be transferred to them where needed for service delivery.
5. Retention and security controls
We keep personal information only for as long as needed for the purpose collected, or for as long as the law requires. This can include retention for accounting, contractual and audit purposes after a service ends.
We use reasonable technical and organisational measures to protect information against loss, misuse and unauthorised access. These measures may include access controls, secure authentication, logging, backups and restricted internal access. No system is completely secure, but we work to keep the risk low and respond quickly if something goes wrong.
Client records are managed carefully, especially where time-sensitive release windows or renewal instructions are involved, so that details are available when needed and not kept longer than necessary.
6. Your POPIA rights and contact steps
Subject to legal limits, you may request access to the personal information we hold about you, ask us to correct inaccurate details, request deletion where lawful, object to certain processing or withdraw consent where consent is the basis for processing.
To make a privacy request, email domains@dropcatcher.co.za with your name, contact details and a clear description of the request. We may need reasonable proof of identity before acting on it. If you are not satisfied with our response, you may have the right to lodge a complaint with the Information Regulator in South Africa.
- Access and correction requests are handled as quickly as reasonably possible
- Security or legal reasons may limit what can be deleted
- We may keep a record of your request for compliance purposes
7. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or data handling practices. The latest version will apply from the date it is published, and continued use of our services after any update means you have read the revised terms.
If you would like a copy of the current policy or need help understanding how your information is handled, contact our team directly. We aim to be clear and practical, with no unnecessary detail.