DERCA Foundation NPC

Privacy notice

Last updated: 11 October 2026

Who we are. DERCA Foundation NPC (registration number 2026/598106/08), a non-profit company registered in South Africa, trading as the Distributed Energy Resources Council for Africa ("DERCA", "we"). We are the responsible party for the personal information described here. Address: 8th Street, Houghton Estate, Johannesburg, 2198, South Africa. Contact: info@derca.org.

DERCA Information Officer. Questions, requests and complaints about your personal information go to the DERCA Information Officer at info@derca.org.

What we collect. When you request the report, sign up for updates, express interest in membership or send us a correction or contribution, we collect your first and last name, email address and, if you give them, your organisation, country, role and message. We also record the date and time you gave consent, the wording you agreed to, the page you came from and any campaign tag in the link you used. We do not use advertising or tracking cookies. Our website analytics are cookieless and do not identify you.

Why we collect it, and on what basis.

• To send you the report you asked for. Basis: your consent and your request (POPIA section 11(1)(a)).
• To send you occasional updates about our research, events and membership, only if you ticked that box. Basis: your consent (POPIA sections 11(1)(a) and 69).
• To contact you about membership, only if you ticked that box. Basis: your consent.
• To review and respond to corrections and data you send us, and to credit you if you agree. Basis: your consent and our legitimate interest in accurate research (section 11(1)(f)).
• To keep a record of your consent and of any withdrawal, so we can show we respect your choices. Basis: compliance with POPIA (section 11(1)(c)).

Is it voluntary? Yes. Name and email address are needed to send you the report; everything else is optional. If you do not give your email address, we cannot send you the report.

Who we share it with. We do not sell your information and we do not share it for others' marketing. We use these service providers (operators), who process it only on our instructions:

• Resend (email delivery), United States.
• Railway (database hosting), outside South Africa.
• Vercel (website hosting), outside South Africa.

Transfers outside South Africa. These providers store or process information outside South Africa. We use them only under contractual data-protection terms that provide an adequate level of protection, as section 72 of POPIA requires.

How long we keep it.

• If you never confirm your email address: deleted after 30 days.
• Report and update records: kept while you remain subscribed, and deleted within 30 days of a request for deletion.
• Email delivery logs: 24 months.
• A record of your consent and any withdrawal: kept for five years after your last choice, in a form that no longer shows your name or email address.

Your rights. You may:

• unsubscribe from updates at any time, using the link in any email;
• ask whether we hold information about you and request a copy (section 23);
• ask us to correct or delete it (section 24);
• object to our processing it (section 11(3));
• lodge a complaint with the Information Regulator.

To exercise these rights, email the DERCA Information Officer at info@derca.org. We will respond within 30 days.

Security. We keep personal information on access-controlled systems, store only hashed versions of the links we email you, and never store your full IP address.

Information Regulator. Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191. Complaints: POPIAComplaints@inforegulator.org.za. Enquiries: enquiries@inforegulator.org.za.

Changes. We will post any change to this notice on this page with a new date.