Privacy Policy
Effective Date: 12 October 2021
1. Introduction
This Privacy Policy explains how personal information is collected, used, disclosed, and protected under the Protection of Personal Information Act 4 of 2013 & 2021 (POPIA) in South Africa, with secondary compliance to GDPR (EU) 2016/679. The organization acts as the responsible party under POPIA or data controller under GDPR.
2. Information We Collect
- Automatically Collected Information: IP addresses, browser type, device information, operating system, access times, pages viewed.
- Information Provided by You: Name, email, telephone, postal address, identification details, payment information.
- Sensitive or Special Personal Information: Not routinely collected unless necessary with explicit consent.
3. How We Collect Information
Information is collected through direct submissions, automated technologies (cookies, web beacons, OAuth logins, tracking pixels), and publicly available sources.
4. Purposes and Legal Basis for Processing
Processing occurs to provide services, respond to inquiries, communicate with users, conduct internal operations, comply with legal obligations, and support application functionalities. Legal bases include consent, contractual necessity, legal obligations, and legitimate interests.
5. Sharing and Disclosure of Information
Personal information may be shared with service providers, affiliates, regulatory authorities, and in merger/acquisition scenarios. The organization does not sell personal information.
6. International Transfers
Data is primarily processed in South Africa; transfers to other countries use safeguards like binding corporate rules or standard data protection clauses. EU user data is stored on EU servers only.
7. Data Security
Technical, organizational, and administrative measures protect information. No system guarantees absolute security. Data breaches trigger notification requirements under POPIA and GDPR.
8. Data Retention
Information is retained only as long as necessary; transaction data is kept for 7 years per South African tax laws.
9. Your Rights
Users may access, rectify, request erasure, restrict processing, object, obtain data portability, withdraw consent, or lodge complaints with the Information Regulator ([email protected]) or GDPR supervisory authorities.
10. Children's Information
Services are not directed at minors under 16; personal information from children is deleted promptly if collected unknowingly.
11. Changes to This Policy
Updates are posted on the website with effective dates; continued use indicates acceptance.
12. Contact Us
Information Officer / Data Protection Officer:
Loopworks PTY Ltd, [email protected]