Privacy Policy

Scalemind PTY LTD ("we," "us," or "our") is committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in compliance with South Africa’s Protection of Personal Information Act (POPIA) and the European Union’s General Data Protection Regulation (GDPR).

1. Definitions

Personal Data: Any information relating to an identified or identifiable natural person.
Data Subject: A natural person whose personal data is processed.
Processing: Any operation performed on personal data, including collection, storage, use, and sharing.
Data Controller: Scalemind PTY LTD, who determines the purpose and means of processing personal data.

2. Data Collection

We may collect and process the following types of personal data:

Contact information: Name, email address, phone number, postal address.
Financial information: Banking details, payment information, billing addresses.
Usage data: Information about how you use our services or interact with our website.
Marketing preferences: Your choices about receiving marketing communications.
Other information: Any information you provide voluntarily when interacting with us.

3. Purpose of Data Processing

We process personal data for the following purposes:

To provide services requested by you.
To respond to inquiries or customer service requests.
For billing and payment processing.
To send marketing materials, newsletters, or promotional content (with your consent).
To improve our products, services, and user experience.
To comply with legal obligations (e.g., tax or regulatory requirements).

4. Lawful Basis for Processing

We will only process your personal data under the following lawful bases:

Consent: When you have given explicit consent for the processing.
Contract: When processing is necessary to perform a contract with you.
Legal obligation: When processing is required to comply with the law.
Legitimate interests: Where we have a legitimate interest in processing, which is not overridden by your data protection rights.

5. Data Sharing

We may share your personal data with:

Service providers who assist us in providing our services (e.g., IT service providers, payment processors).
Regulatory bodies or law enforcement when required by law.
Business partners, only with your explicit consent for marketing or collaboration purposes.

We ensure that all third-party service providers are bound by data protection obligations consistent with this policy and applicable laws.

6. International Data Transfers

If we transfer personal data outside of South Africa or the European Economic Area (EEA), we will ensure that appropriate safeguards are in place, such as:

Transfer to countries deemed to provide adequate protection by the European Commission or Information Regulator.
Standard contractual clauses approved by the European Commission or other relevant authorities.
Binding corporate rules.

7. Data Retention

We will retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once the data is no longer required, we will securely delete or anonymize it.

8. Data Subject Rights

Under POPIA and GDPR, you have the following rights:

Access: Request access to the personal data we hold about you.
Correction: Request corrections to inaccurate or incomplete data.
Deletion: Request the deletion of your personal data.
Restriction: Request that we restrict the processing of your data.
Portability: Request to receive your personal data in a structured, commonly used format.
Objection: Object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Withdraw consent: Withdraw your consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us at [Insert Contact Information].

9. Data Security

We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These include encryption, access control, and secure storage.

10. Data Breach

In the event of a data breach, we will notify the relevant supervisory authority without undue delay, and where required by law, we will inform you if your personal data is affected.

11. Marketing and Communications

You have the right to opt out of receiving marketing communications at any time by following the unsubscribe instructions in any of our emails or by contacting us directly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and if significant, we will notify you via email or through our website.

13. Contact Information

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal data, please contact:

Scalemind PTY LTD