Home / Privacy policy (POPIA)

Privacy policy (POPIA)

How SmallRFQs collects, uses and protects your personal information.

Draft for review. Fill in the [square brackets] and have it checked before launch.

What we collect

Your name, email address, cellphone number, business name, the categories you supply, the provinces you want RFQs from, optional CSD supplier number, your alert settings, and your subscription and payment history. Card numbers are entered on Netcash's secure page; we never see or store them. Netcash tells us a masked card number and expiry date so we can show them to you.

Why we use it

To run your account, match and email RFQs to you, take subscription payments, send service messages (trial ending, payment problems, card expiry), and keep the service secure. We don't sell your information.

Who we share it with

Service providers that help us run SmallRFQs, under agreements that protect your information: Supabase (account database), Netcash (payments), our web host [domains.co.za], and our email provider. Some providers may process data outside South Africa, with protections required by POPIA.

How long we keep it

While your account is open, and afterwards only as long as needed for tax, accounting and legal reasons. [Set retention period, e.g. 5 years for billing records.]

Your rights

You may ask to see, correct or delete your personal information, or object to its use, by emailing support@smallrfqs.co.za. You may also complain to the Information Regulator (South Africa).

Cookies and storage

We use essential browser storage to keep you logged in. We don't use advertising cookies. [Update if you add analytics.]

PAIA and Information Officer

Information Officer: [name], [email]. Our PAIA manual is available on request from the Information Officer.