Privacy Policy

1. POPIA Principles We Follow

• Accountability — We accept responsibility for lawful processing.
• Processing Limitation — Data is collected minimally and with justification.
• Purpose Specification — Data is collected for specific defined tasks only.
• Further Processing Limitation — Data is not reused beyond its purpose.
• Information Quality — Reasonable steps are taken to maintain accuracy.
• Openness — We provide transparency about processing activities.
• Security Safeguards — Appropriate protections are implemented.
• Data Subject Participation — Users may exercise their rights.

2. Information We Collect

Depending on the services used, we may process:

• Identity and contact information
• Service interaction data
• Messaging or conversation data (where applicable)
• Technical logs and device metadata

We collect only information that is relevant and necessary for the execution of a defined task.

3. Purpose of Processing

Personal information is processed solely for:

• Providing requested services
• Executing specific operational tasks
• Maintaining security and integrity of systems
• Meeting legal or contractual obligations

We do not sell or repurpose personal data for unrelated activities.

4. Cookies and Tracking Technologies

Our digital services may use cookies or similar technologies to ensure functionality, improve performance, and maintain session integrity.

• Essential Cookies — Required for system operation
• Analytics Cookies — Used to improve service performance
• Security Cookies — Used to detect malicious activity

Users may configure browsers to reject cookies; however, functionality may be impacted. We do not use tracking technologies for invasive profiling.

5. Messaging Platforms (WhatsApp and Similar Services)

Where messaging integrations are provided, including interactions through platforms such as WhatsApp, we may process message content and associated metadata solely to:

• Facilitate automated or assisted responses
• Store conversation state where required
• Deliver requested communication services

Messaging data is handled confidentially and is not used for marketing or resale. Users should note that external messaging platforms maintain their own privacy policies.

6. API and Systems Integration Processing

Where our services integrate with external systems or APIs:

• Data exchanged is limited to what is necessary for the task
• Transmission occurs via secure protocols where feasible
• We act as Operator when processing data on behalf of clients

We do not retain or reuse such data beyond operational requirements unless legally required.

7. Security Safeguards

We apply reasonable technical and organizational security measures, including:

• Access control restrictions
• Encryption where appropriate
• Audit and monitoring procedures
• Secure infrastructure practices

8. Data Retention

Information is retained only for as long as necessary for its purpose or legal compliance. Data is securely destroyed or anonymized when no longer required.

9. Data Subject Rights

Under POPIA, users may:

• Request access to their personal information
• Request correction or deletion
• Object to processing where applicable
• Lodge a complaint with the Information Regulator

10. Contact and Information Officer

Requests or concerns may be directed to our Information Officer:

Vambita (Pty) Ltd
Email: [email protected]

11. Policy Updates

This policy may be updated periodically to reflect legal or operational changes. The latest version will be published on this page.