1. Who We Are
SA Business Registry (“we”, “us”, “our”) is a South African online platform where businesses can list themselves for a fee. We offer verification, directory listings, and promotional services to help businesses gain online visibility and credibility.
2. What We Collect
From website visitors:
- Email address (when submitted via contact forms)
- Cookies, device data, IP address, and browsing behaviour
From businesses listing with us:
- Business name, contact details, registration and tax numbers
- Director or owner information
- Verification documents (e.g. proof of registration, identity, address)
- Payment details (processed securely via third-party gateways)
3. Why We Process This Data
We process personal data to:
- Provide business listing services
- Validate business legitimacy and verify identities
- Fulfil our legal and contractual obligations
- Manage subscriptions, billing, and communication
- Track usage and improve our platform
We rely on consent, legal obligations, and legitimate interest as our lawful basis for processing data under POPIA.
4. Sharing and Disclosure
We do not sell personal data. Information is only shared with:
- Trusted service providers (e.g. payment processors, hosting partners)
- Law enforcement or regulators when legally required
- Marketing or analytics platforms under data protection agreements
5. Cookies and Tracking
We use cookies and similar tracking tools to personalise your experience, track usage, and manage analytics. You can manage your cookie preferences through your browser settings or consent banner.
6. Data Security and Retention
We use SSL encryption, secure servers, and restricted access protocols to protect your data. We retain personal data only for as long as necessary to provide our services, meet legal requirements, or resolve disputes.
7. Your Rights Under POPIA
As a data subject, you have the right to:
- Access and correct your personal information
- Object to processing or withdraw consent
- Request deletion (where applicable)
- Complain to the Information Regulator
8. Cross-Border Data Transfers
In cases where your data is stored or processed outside South Africa (e.g. international cloud hosting), we ensure that equivalent data protection standards are in place or we obtain your explicit consent.
9. Data Breach Notifications
In the event of a data breach, we will notify the Information Regulator and any affected parties as soon as reasonably possible, unless instructed otherwise by legal authorities.
10. Information Officer
Our designated Information Officer is:
Name: [Insert Name]
Email: info@sabusinessregistry.co.za
This officer will be registered with the Information Regulator as required by law.
11. Changes to This Policy
We reserve the right to change or update this Privacy Policy at any time, without prior notice. Any changes will be posted on our website and will take effect immediately unless otherwise stated.
It is your responsibility to review this policy regularly to stay informed.
Last updated: 31 May 2025