1. Introduction
Datashield (Pty) Ltd ("Datashield", "we", "us", or "our") is committed to protecting the privacy and personal information of our clients, users, and website visitors. This Privacy Policy explains how we collect, use, store, and share personal information in connection with our services, including the SpazaKonnect platform, our WhatsApp-based communication services, and this website (datashieldsa.co.za).
We comply with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African data protection legislation. By using our services or visiting our website, you consent to the collection and use of your information as described in this policy.
2. Information We Collect
We collect different types of personal information depending on how you interact with us:
2.1 WhatsApp-Based Communication
When you communicate with us via WhatsApp, we may collect:
- Your phone number and WhatsApp display name
- Message content, including text, images, and documents you send
- Timestamps and metadata related to message delivery
- Opt-in and opt-out preferences
2.2 SpazaKonnect Platform
If you use the SpazaKonnect application, we may collect:
- Registration details (name, phone number, email address, business name)
- Store and business information (location, type of business)
- Inventory and product data
- Sales and transaction history
- Credit and payment records
- Usage data and interaction logs within the application
2.3 Website and Contact Forms
When you visit our website or submit a contact form, we may collect:
- Your name, email address, and company name
- The content of your message or enquiry
- Browser type, IP address, and pages visited (via standard server logs)
2.4 Payment Information
Payments are processed through our third-party payment partners, PayFast and EasyPay. We do not store your full credit card details, bank account numbers, or other sensitive payment information on our servers. Our payment partners handle this data in accordance with PCI-DSS standards and their own privacy policies.
3. How We Use Your Information
We use the personal information we collect for the following purposes:
- Service Delivery: To provide, maintain, and improve our products and services, including SpazaKonnect and WhatsApp-based support.
- Communication: To respond to your enquiries, send service updates, and provide customer support via WhatsApp, email, or phone.
- Payment Processing: To facilitate transactions through PayFast and EasyPay on your behalf.
- Analytics and Improvement: To understand how our services are used and to improve functionality, user experience, and business intelligence offerings.
- Legal Compliance: To comply with applicable laws, regulations, and legal obligations, including POPIA.
- Security: To detect, prevent, and respond to fraud, abuse, or security incidents.
4. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected:
- WhatsApp Data: Message content and associated metadata are retained for a maximum of 30 days after your last interaction, after which they are permanently deleted unless required for an ongoing support case or legal obligation.
- SpazaKonnect Data: Account and transaction data are retained for the duration of your active use of the platform, and for a reasonable period thereafter to comply with tax, accounting, and legal requirements.
- Website Enquiries: Contact form submissions are retained for 12 months unless an ongoing business relationship exists.
- Payment Records: Transaction records are retained as required by South African tax and financial legislation.
When personal information is no longer required, it is securely deleted or anonymised within 30 days.
5. Third-Party Sharing
We do not sell, rent, or trade your personal information. We may share your information with the following categories of third parties, only to the extent necessary to provide our services:
- PayFast and EasyPay: For processing payments securely on your behalf.
- Meta (WhatsApp Business Platform): WhatsApp messages are transmitted through Meta's infrastructure. Meta's use of data is governed by their own privacy policy and the WhatsApp Business Terms of Service.
- Formspree: Contact form submissions on our website are processed through Formspree's service.
- Hosting and Infrastructure Providers: Our website and applications are hosted on third-party servers that comply with industry-standard security practices.
- Legal Authorities: We may disclose information if required by law, regulation, court order, or governmental request.
6. Data Security
We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it, including:
- Encryption of data in transit (TLS/SSL) and at rest where applicable
- Access controls limiting who within our organisation can access personal data
- Regular security assessments and vulnerability monitoring
- Secure coding practices and infrastructure hardening
- Incident response procedures to address any data breaches promptly
While we strive to protect your personal information, no method of transmission or storage is 100% secure. We encourage you to contact us immediately if you suspect any unauthorised access to your data.
7. Your Rights Under POPIA
As a data subject under the Protection of Personal Information Act (POPIA), you have the following rights:
- Right of Access: You may request confirmation of whether we hold personal information about you, and request a copy of that information.
- Right to Correction: You may request that we correct or update any inaccurate, incomplete, or misleading personal information.
- Right to Deletion: You may request that we delete your personal information where it is no longer necessary for the purpose for which it was collected, subject to legal retention requirements.
- Right to Object: You may object to the processing of your personal information on reasonable grounds, including for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.
- Right to Complain: You have the right to lodge a complaint with the Information Regulator (South Africa) if you believe your personal information has been mishandled.
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within a reasonable time and in accordance with POPIA requirements.
8. Cookies and Analytics
Our website uses minimal cookies necessary for basic functionality. We do not use third-party tracking cookies or advertising cookies. Standard server logs may record your IP address, browser type, and pages visited for security and performance monitoring purposes.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or business practices. When we make significant changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
10. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a concern, please contact us:
For complaints regarding the handling of personal information, you may also contact the Information Regulator (South Africa) at inforegulator.org.za.
Last updated: 7 April 2026
