Privacy Policy

Introduction

This Privacy Policy explains how digidan (Pty) Ltd (“digidan”, “we”, “us”) collects, uses, shares and protects personal information when you visit digidan.co.za or contact us. We are the responsible party for this processing under the Protection of Personal Information Act, 2013 (POPIA).

Information Officer

Our Information Officer can be reached at desk@digidan.co.za. [Information Officer name and postal address to be confirmed.]

What personal information we collect

We keep the personal information we collect to a minimum.

• Information you give us. When you use the contact form or email us, we collect your email address and anything you choose to include in your message.
• Information collected automatically. If analytics is enabled, we use a privacy-friendly, cookieless tool that records aggregated, anonymised usage (such as page views and approximate region) and does not identify you. Our hosting provider may keep standard server logs (such as IP address and browser type) for security and reliability.

We do not collect special personal information, and we do not knowingly collect information from children.

Why we collect it, and our lawful basis

We process your personal information to:

• respond to your enquiry and communicate with you;
• provide, secure, maintain and improve the website; and
• comply with our legal obligations.

Our lawful bases under POPIA include your consent (which you may withdraw), entering into or performing an agreement with you, and our legitimate interests in operating our business, balanced against your rights.

Who we share it with

We do not sell your personal information. We share it only with operators who process it on our behalf, under agreement and appropriate safeguards, such as our contact-form provider, our privacy-friendly analytics provider, and our email, hosting and infrastructure providers. We may also disclose information where required by law.

Cross-border transfers

Some operators may process information outside South Africa. Where this happens, we take reasonable steps to ensure your information receives a comparable level of protection, as required by POPIA.

How we protect your information

We take reasonable technical and organisational measures to safeguard personal information, including encryption in transit, access controls, and collecting only what we need. No method of transmission or storage is completely secure, but we work to protect your information and to address any incident appropriately, including notifying you and the Information Regulator where the law requires it.

How long we keep it

We keep personal information only for as long as necessary for the purposes in this policy, to meet our legal obligations, or to resolve disputes, after which it is deleted or anonymised.

Cookies

The website does not use advertising or tracking cookies. Any analytics used is cookieless and does not identify you.

Your rights

Under POPIA you have the right to:

• ask what personal information we hold and request access to it;
• ask us to correct or delete your personal information;
• object to, or ask us to restrict, certain processing;
• withdraw consent where we rely on it; and
• lodge a complaint with the Information Regulator.

To exercise any of these, email desk@digidan.co.za. We may need to verify your identity before acting on a request.

Complaints to the Information Regulator

If you believe we have not handled your personal information lawfully, you may lodge a complaint with the Information Regulator (South Africa). Their current contact details are published at inforegulator.org.za.

Changes to this policy

We may update this policy from time to time. The latest version is always available on this page, with the effective date shown above.