Poppy (Pty) Ltd, a private company duly registered in the Republic of South Africa with registration number 2025/422067/07, including its subsidiaries, affiliates, service providers, agents, third-party providers, officers, directors, employees, legal representatives and content providers (collectively referred to as the “Provider”), is committed to protecting the privacy of any individual or legal entity (hereinafter referred to as the “User”) that registers, subscribes to, or uses the Provider’s platform, website or services (the “Platform”).
The Provider adheres to strict measures and protocols to ensure that all Personal Information is collected, processed and used lawfully, transparently and in compliance with applicable regulations, including the Protection of Personal Information Act 4 of 2013 (POPIA).
The User and the Provider shall for purposes of this Privacy Policy collectively be referred to as the “Parties” and individually as a “Party”.
Processing for purposes of this Privacy Policy means any operation or activity, whether automatic or not, concerning Personal Information, including:
collection, receipt, recording, organisation, collation, storage, updating or modification, retrieval, alteration, consultation or use
dissemination by means of transmission, distribution or making available in any other form
merging, linking, restricting, degradation, erasure or destruction of information
The terms “Processing”, “Process”, or “Processed” shall have corresponding meanings.
By accepting the Terms and using the Provider’s Platform, the User expressly consents to the Provider collecting, processing and using the User’s Personal Information as specified in this Privacy Policy.
The Provider may process Personal Information in order to:
comply with legal obligations
protect legitimate business interests
provide services through the Platform
fulfil other lawful purposes outlined in this policy
By subscribing or registering on the Platform, the User gives consent in terms of Section 69 of POPIA for the Provider to process the User’s Personal Information for purposes of direct marketing via electronic communication relating to products and services offered by the Provider.
Users may unsubscribe from such communications at any time.
Personal Information may be collected directly from the User when the User provides information on the Platform or website in order to create an account or personalised profile.
Where reasonably possible, the Provider will inform the User which information is required and which information is optional.
Personal Information, as defined under POPIA, includes information relating to an identifiable, living natural person or identifiable juristic person.
Such information may include:
name and contact information
email address
physical address
phone number
identity or registration numbers
location data
online identifiers
correspondence sent to the Provider
transaction records
information relating to account usage or service interactions
Personal Information excludes general, statistical, aggregated or anonymised data.
The Platform may collect usage information through cookies, which are small text files stored on the User’s device by a web browser.
Cookies help the Provider:
improve user experience
analyse website traffic
personalise services
Users may configure their browser to refuse cookies. However, certain functionality of the Platform may be affected.
The Platform may also make use of Google Analytics, which assists in analysing website traffic and usage patterns.
Google Analytics may collect anonymised usage data such as:
IP address (anonymised)
device information
browsing behaviour
Users may opt out of such tracking through browser settings.
Personal Information may be used for the following purposes:
providing access to the Platform
verifying user identity
delivering requested services
communicating with users
improving services and functionality
compiling statistical analysis of website usage
Personal Information will only be used for the purpose for which it was collected unless otherwise required by law.
The Provider will not retain Personal Information longer than necessary for the purposes for which it was collected, unless retention is required:
by law
for legitimate business purposes
in terms of an agreement between the Parties
for historical, research or statistical purposes with appropriate safeguards
When Personal Information is no longer required, it will be securely deleted or destroyed.
The Provider may disclose Personal Information to third-party service providers involved in the delivery of services through the Platform.
This may include cloud hosting providers or analytics services.
Where Personal Information is transferred outside South Africa, such transfers will comply with applicable provisions of POPIA.
The Provider is legally obliged to provide adequate protection for Personal Information and prevent unauthorised access or use.
Reasonable technical and organisational safeguards are implemented to protect Personal Information from:
unauthorised access
accidental loss
destruction or damage
unlawful disclosure
Security protocols are reviewed regularly to ensure continued protection.
Users have the right to:
request access to Personal Information held about them
request correction of inaccurate information
request deletion where legally permissible
withdraw consent for marketing communications
Requests may be submitted to the Provider via the contact details provided on the Platform.
Identity verification may be required before information is disclosed.
If the Provider becomes aware of a security incident involving Personal Information, reasonable steps will be taken to:
investigate the incident
mitigate potential harm
notify affected users where required by law
report the incident to relevant authorities where applicable
Users who believe their Personal Information has been processed unlawfully may submit a complaint to the Information Regulator of South Africa at:
complaints.IR@justice.gov.za
For any questions regarding this Privacy Policy or the processing of Personal Information, users may contact:
Poppy (Pty) Ltd
Registration Number: 2025/422067/07
Email: support@poppydt.co.za