Last updated: August 2026
If you are located in the European Economic Area, you have specific rights regarding your personal data under the General Data Protection Regulation. We respect these rights and provide mechanisms for you to exercise them.
You have the right to request access to the personal data we hold about you. We will provide you with a copy of your data in a commonly used electronic format within one month of your request, subject to verification of your identity.
If you believe any information we hold about you is incorrect or incomplete, you have the right to request correction. We will assess the accuracy of the data and make necessary corrections promptly.
Under certain circumstances, you have the right to request deletion of your personal data. This applies when:
You may request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing while we verify legitimate grounds.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible.
You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis for processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Where we process your data based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
We process personal data under the following legal bases:
While our primary operations are in South Africa, if we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
We do not use automated decision making or profiling that produces legal effects or similarly significantly affects individuals.
You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data appropriately or responded adequately to your requests.
To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month, though this period may be extended by two additional months for complex requests. We will inform you of any such extension and the reasons for delay.
To protect your privacy, we may request additional information to verify your identity before fulfilling requests related to your personal data.