Last Updated: July 2026
This document outlines our commitment to compliance with the General Data Protection Regulation (GDPR) and explains how we protect the personal data of individuals in the European Economic Area who interact with our services.
We process personal data under the following legal bases:
You have the right to request confirmation about whether we process your personal data and to access that data. We will provide you with a copy of your personal information in a commonly used electronic format.
If your personal data is inaccurate or incomplete, you have the right to request correction or completion of that information.
Also known as the "right to be forgotten," you can request deletion of your personal data when:
You may request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to our processing.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You can object to our processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we have compelling legitimate grounds.
You have the right not to be subject to decisions based solely on automated processing that produces legal effects or similarly significant impacts. We do not currently employ automated decision-making processes.
To exercise any of these rights, please contact us at [email protected]. Include sufficient information to allow us to identify you and verify your identity. We will respond to your request within 30 days.
For questions about our data protection practices or to exercise your GDPR rights, contact our data protection contact at [email protected].
Your personal data is primarily processed and stored in South Africa. If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Retention periods vary depending on the nature of the data and the purposes for which it is processed.
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected information from a child without proper consent, we will delete it promptly.
If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.
For questions about GDPR compliance or to exercise your data protection rights:
Email: [email protected]
Address: 147 Oxford Road, Rosebank, Johannesburg, 2196, South Africa