POPIA Notice

Responsible Party

TenderSearch SA
Email: info@tendersearch.co.za

Information Officer

Information Officer requests can be sent to info@tendersearch.co.za with the subject line "Information Officer".

Categories of personal information we process

• Identity: name, business name.
• Contact: email address, phone number (optional).
• Account credentials: hashed password, session tokens.
• Financial: subscription plan, billing status, invoice history. Card data is held by PayFast — not by us.
• Technical: IP address, device and browser, login timestamps, security logs.
• Usage: saved tenders, alert keywords, search activity.

Purpose of processing

• Provide and bill the subscription service.
• Send tender alerts and service notifications.
• Comply with tax, accounting and other legal duties.
• Detect abuse, fraud and unauthorised scraping.
• Respond to support requests.

Recipients (operators)

• PayFast — payments.
• GoDaddy SMTP — email delivery.
• Cloudflare — security and CDN.
• Hosting provider — application and database hosting.
• Google — if Google Ads, AdSense or Analytics is enabled, for advertising and measurement cookies.

Cross-border transfers

Some operators may store data outside South Africa. We rely on contractual safeguards with each operator that provide protection comparable to POPIA.

Your rights

• Access the personal information we hold about you.
• Request correction or deletion (subject to retention rules).
• Object to direct marketing at any time.
• Withdraw consent where processing is based on consent.
• Complain to the Information Regulator — inforegulator.org.za, email POPIAComplaints@inforegulator.org.za.

Security

All traffic is encrypted with TLS. Passwords are hashed with scrypt. Sessions are device-bound and capped at 4 per account. Admin and webhook activity is logged for audit.

Retention

See section 6 of our Privacy Policy for retention periods by data category.