Privacy Policy

Issue Date: 01 December 2024
Revision: 01

Welcome to the DigifyIQ Privacy Policy.

1. INTRODUCTION
   1.1. DigifyIQ (Pty) Ltd (“DigifyIQ”, “we”, “our”, or “us”) respects the privacy of all individuals and businesses (“users”) accessing and using our platform.
   1.2. This Privacy Policy outlines how we collect, use, and store personal data in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA), and the General Data Protection Regulation (GDPR) (EU) 2016/679.
   1.3. By accessing or using our platform, you acknowledge and agree to the terms of this Privacy Policy.
   1.4. This policy must be read together with our Terms and Conditions and any applicable third-party privacy policies that may apply.
2. WHO WE ARE
   2.1. DigifyIQ is a South African-based digital platform that facilitates connections between businesses seeking digital marketing services (“Leads”) and independent service providers or agencies (“Partners”).
   2.2. DigifyIQ provides the platform infrastructure and does not act as the data controller for personal data exchanged directly between Leads and Partners.
   2.3. Any personal or business data exchanged between users on the platform is done at their own discretion. DigifyIQ does not monitor, control, or take responsibility for how third parties (including Partners) handle, process, or store such data.
   2.4. Users are responsible for conducting their own due diligence and should review the privacy practices of any other users they engage with on or through the platform.
   2.5. For clarity, the terms “user”, “you”, or “your” in this policy refer to both Leads and Partners unless otherwise stated.
3. INFORMATION WE COLLECT
   3.1. DigifyIQ only collects and processes information that is submitted by users directly through the platform interface for the purpose of operating and improving the platform. This may include the following categories of personal data:
   3.1.1. Identification and contact details (e.g., name, email address, phone number, company name) submitted during registration or inquiry.
   3.1.2. Business profile information submitted by Partners during listing or onboarding.
   3.1.3. Quotation request information is voluntarily submitted by Leads via platform forms.
   3.1.4. Platform support communication history (e.g., queries submitted via contact forms or emails to DigifyIQ).
   3.1.4. Technical data such as IP address, browser type, device information, and aggregated platform usage analytics are collected through standard website analytics tools.
   3.1.5. Payment-related data for platform membership or promotional services is processed securely through third-party payment processors. DigifyIQ does not store credit or debit card details.
   3.2. DigifyIQ does not collect or control any personal data exchanged directly between Leads and Partners beyond the initial platform-mediated request. All further communication, data exchange, and service delivery between Leads and Partners occur independently and are governed by the respective privacy and data handling policies of those parties.
4. LEGAL BASIS FOR PROCESSING (GDPR & POPIA COMPLIANCE)
   4.1. DigifyIQ processes only the personal data voluntarily submitted by users via the platform for the purpose of enabling platform functionality, ensuring system security, responding to support requests, and managing membership-related services.
   4.2. We process such data based on one or more of the following legal grounds:
   4.2.1. Your consent – where you have given us clear and affirmative permission to process your data for specific purposes (e.g., submitting a quotation request or registering as a Partner) (GDPR Article 6(1)(a); POPIA Section 11(1)(a))
   4.2.2. Contractual necessity – where processing is required to provide a service you have requested through the platform, such as membership registration or quote facilitation (GDPR Article 6(1)(b); POPIA Section 11(1)(b))
   4.2.3. Legitimate interests – where we process minimal necessary data to maintain and improve the platform and ensure user experience, provided such processing does not override your rights and interests (GDPR Article 6(1)(f); POPIA Section 11(1)(f))
   4.2.4. Compliance with legal obligations – where we are required to retain certain data under South African law (e.g., tax or regulatory requirements) (GDPR Article 6(1)(c); POPIA Section 11(1)(c))
   4.3. DigifyIQ does not process or take responsibility for any personal information exchanged directly between Leads and Partners beyond what is voluntarily submitted through the platform. Any further processing of such data is the responsibility of the respective parties, subject to their own privacy obligations and applicable data protection laws.
5. PURPOSE OF COLLECTION AND USE
   5.1. DigifyIQ collects and uses personal data submitted through the platform solely for the purpose of operating, maintaining, and enhancing the functionality of the platform. This includes:
   5.1.1. Facilitating the submission and forwarding of quotation requests between Leads and Partners, without interfering in the communication or services that follow.
   5.1.2. Managing user accounts, subscriptions, and access to platform features.
   5.1.3. Improving the overall performance, usability, and security of the platform.
   5.1.4. Meeting our obligations under applicable legal, tax, or regulatory requirements.
   5.1.5. Detecting, preventing, and responding to misuse, abuse, or fraudulent activity on the platform.
   5.1.6. Sending relevant service-related notifications, system alerts, or updates necessary for account administration.
   5.2. DigifyIQ does not use, or process personal data exchanged directly between Leads and Partners after the quotation request has been submitted. Any further communication, use, or handling of personal data between users is solely the responsibility of those parties, governed by their own privacy and data management policies.
6. DISCLOSURE OF PERSONAL DATA
   6.1. DigifyIQ may disclose limited personal data submitted through the platform where it is necessary to support the platform’s functionality or comply with legal obligations. This may include:
   6.1.1. Sharing relevant information with other users (Leads or Partners) strictly for the purpose of enabling quotation requests and initial communication, based on the user’s submitted request.
   6.1.2. Engaging trusted third-party service providers to support our operations—such as hosting services, analytics platforms, or secure payment processors (e.g., PayFast, PayPal). These service providers are contractually obligated to process your data only for the intended purposes and in compliance with applicable data protection laws.
   6.1.3. Complying with applicable legal obligations, including court orders, subpoenas, or lawful requests by public authorities.
   6.1.4. Disclosing information in connection with any proposed or actual sale, merger, transfer, or restructuring of DigifyIQ’s business, is subject to strict confidentiality and data protection safeguards.
   6.2. DigifyIQ does not sell, rent, or trade your personal data to any third party for marketing or unsolicited commercial purposes.
   6.3. Users acknowledge that once personal data is shared between users on the platform (e.g. a Lead and a Partner), DigifyIQ does not oversee or take responsibility for how that data is further handled, disclosed, or processed. Such exchanges are governed by the respective parties’ own privacy practices.
7. CROSS-BORDER DATA TRANSFERS
   7.1. Users acknowledge that use DigifyIQ operates as a digital platform, the personal data you submit through the platform may be processed or stored in countries outside of South Africa or the European Economic Area (EEA). Where such transfers occur, DigifyIQ ensures that appropriate legal and security safeguards are in place in line with the requirements of the Protection of Personal Information Act (POPIA) and the General Data Protection Regulation (GDPR). These safeguards may include the use of standard contractual clauses, data processing agreements, or ensuring that the third-party service provider is based in a jurisdiction with adequate data protection laws.
   7.2. Users acknowledge that DigifyIQ does not control or take responsibility for any cross-border data transfers that occur directly between users (e.g., Leads and Partners) once they engage outside of the platform. Users are advised to exercise caution and confirm the data handling practices of any parties they interact with.
8. DATA RETENTION
   8.1. DigifyIQ retains personal data only for as long as necessary to fulfil the purposes for which it was collected, as outlined in this Privacy Policy, or to comply with applicable legal, regulatory, or contractual obligations.
   8.2. Where applicable, the following principles apply:
   8.2.1. Data related to account management and subscription will be retained while your account is active and for a reasonable period thereafter for administrative or audit purposes.
   8.2.2. Quotation request data will be retained only for as long as needed to facilitate the request and provide platform support.
   8.2.3. Technical data may be retained for analytics, security, and platform performance monitoring.
   8.3. Users acknowledge and agree that DigifyIQ does not retain or have access to personal data exchanged directly between Leads and Partners beyond the original quotation submission. Users are advised to manage their own data retention obligations when engaging off-platform.
9. USER RIGHTS
   9.1. In accordance with POPIA and GDPR, users have the following rights regarding their personal data submitted through the DigifyIQ platform:
   9.1.1. The right to access the personal data we hold about you.
   9.1.2. The right to correct or update your personal data.
   9.1.3. The right to request deletion of your personal data, where legally permissible.
   9.1.4. The right to withdraw consent, where processing is based on consent.
   9.1.5. The right to lodge a complaint with the Information Regulator (South Africa) or your local data protection authority, if applicable.
   9.2. Users acknowledge and agree that these rights apply only to the data collected and processed by DigifyIQ through the platform. DigifyIQ does not manage, or control personal data handled directly between Leads and Partners, and users must exercise their rights directly with such parties where applicable.
   9.3. To exercise any of the above rights, users may contact our Information Officer at infofficer@digifyiq.co.za.
10. SECURITY MEASURES
    10.1. DigifyIQ implements reasonable administrative, technical, and physical safeguards to protect the personal data submitted via the platform from unauthorised access, loss, misuse, or alteration.
    10.2. These measures include but are not limited to:
    10.2.1. Secure server hosting and SSL encryption.
    10.2.2. Limited access controls and authentication requirements.
    10.2.3. Regular system monitoring and updates to mitigate risks.
    10.3. While DigifyIQ takes all reasonable precautions to protect personal data processed through the platform, users acknowledge and agree that no system is entirely immune to risks. Additionally, DigifyIQ cannot guarantee the security of any data shared between users (Leads and Partners) once communication occurs outside of the platform.
    10.4. Users are encouraged to adopt their own data protection practices when engaging off-platform.
    10.4.1. Our full PAIA/POPIA Manual is available upon request or may be accessed when requested.
11. COOKIES AND TRACKING TECHNOLOGIES
    11.1. DigifyIQ uses cookies and similar tracking technologies to enhance your experience on our platform, analyse usage patterns, and support functionality such as user login and language preferences.
    11.2. By using the platform, users acknowledge and agree to our use of cookies, which may include:
    11.2.1. Essential cookies – required for basic platform functionality, such as account login and secure browsing.
    11.2.2. Performance cookies – used to collect aggregated data on how users interact with the platform to improve performance and usability.
    11.2.3. Functional cookies – used to remember user preferences and enhance features.
    11.2.4. Third-party cookies – including cookies from analytics tools (e.g., Google Analytics) or embedded service providers that may process technical data.
    11.3. Users may choose to disable or delete cookies through their browser settings; however, doing so may impact platform performance or limit certain features.
    11.4. DigifyIQ does not use cookies to collect sensitive personal information or track users across third-party websites for advertising purposes.
12. CHILDREN’S PRIVACY
    12.1. The DigifyIQ platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete such information. Users acknowledge and agree that they must be of legal age to use the platform or must have appropriate parental consent where applicable.
13. THIRD-PARTY LINKS AND SERVICES
    13.1. The platform may contain links to third-party websites or services that are not operated or controlled by DigifyIQ. This Privacy Policy applies only to data collected through our platform. Users acknowledge and agree that DigifyIQ is not responsible for the privacy practices or content of such third-party websites or services. We encourage users to review the privacy policies of any third parties they engage with.
14. CHANGES TO THE PRIVACY POLICY
    14.1. DigifyIQ reserves the right to amend this Privacy Policy from time to time to reflect legal, technical, or operational changes. Any material changes will be communicated via the platform or email, where applicable. Continued use of the platform after such changes indicates your acceptance of the updated policy. Users acknowledge and agree to review this policy periodically to remain informed of how their personal data is handled.
15. CONTACT US
    15.1. If you have any questions about this Privacy Policy or your personal information, please contact us at:
    15.1.1. General Enquiries: info@digifyiq.co.za
    Information Officer Email: infofficer@digifyiq.co.za