This policy explains how Securade (Pty) Ltd collects, uses, stores, and shares your personal information, and what rights you have under the Protection of Personal Information Act 4 of 2013 (POPIA).
1. Who we are
Securade (Pty) Ltd ("Securade", "we", "us") is a South African software company that provides a physical security risk assessment platform — a mobile app and web platform for security consultants and facilities teams. Our registered address and contact details are:
- Email: support@securade.co.za
- Phone: +27 81 406 6735 | 010 023 1299
- Website: securade.co.za
Securade is the Responsible Party for personal information collected through our website (securade.co.za) and application (app.securade.co.za).
2. What information we collect
2.1 Information you provide directly
| Where collected | Information | Why |
|---|---|---|
| Sample-report form | First name, last name, work email, industry, company name | To send the report and follow up with relevant product information |
| Account registration | Name, email address, company, phone number, password (hashed) | To create and manage your Securade account |
| Subscription / billing | Billing name, email, and PayFast transaction reference | To process payments and manage your subscription |
| Demo / contact form | Name, email, company, message | To respond to your enquiry and schedule a demo |
| Assessment data | Site findings, photos, risk ratings, client and site details captured during assessments | To generate and store your security risk assessment reports |
2.2 Information collected automatically
When you visit our website or use the app, we may collect:
- IP address, browser type and version, operating system
- Pages viewed, time spent, and navigation paths (via server logs)
- Device model and OS version (for the Android app)
- Push notification tokens (Firebase Cloud Messaging) if you allow notifications
3. How we use your information
We use personal information for the following purposes:
- Delivering the service — creating accounts, generating and storing assessment reports, processing payments.
- Sending the sample report — if you complete the sample-report form, we will email you the PDF and may follow up with relevant information about Securade features, pricing, or updates.
- Marketing and promotional communications — with your consent, or where we have a legitimate interest, we may contact you about Securade products, feature releases, pricing changes, or offers relevant to your industry. You can opt out at any time (see section 7).
- Customer support — responding to queries, troubleshooting, and account assistance.
- Security and fraud prevention — detecting and preventing unauthorised access or misuse.
- Legal compliance — meeting obligations under POPIA, the Companies Act, tax law, and other applicable South African legislation.
4. Legal basis for processing
Under POPIA, we process your personal information on one or more of the following grounds:
- Contract — processing is necessary to fulfil our contract with you (account creation, report delivery, subscription management).
- Legitimate interest — sending service-related communications and marketing to existing customers or prospects who have expressed interest in our services.
- Consent — where we rely on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.
- Legal obligation — compliance with applicable law.
5. Sharing your information
We do not sell your personal information to third parties.
We share your information only with parties that are necessary to deliver the Securade service or meet legal requirements:
| Third party | Purpose | Location |
|---|---|---|
| PayFast (DPO PayGate) | Payment processing for subscriptions and report credits | South Africa |
| Google Analytics (Google LLC) | Website analytics — pages visited, session duration, traffic sources. Data is anonymised and aggregated. Opt out here. | USA (Standard Contractual Clauses apply) |
| Google Firebase | Push notifications (Firebase Cloud Messaging) and app analytics | USA (Standard Contractual Clauses apply) |
| Hosting provider (cPanel) | Web and database hosting for app.securade.co.za and securade.co.za | South Africa |
| Email delivery provider | Transactional and notification emails | As configured |
Each of these parties is contractually bound to protect your information and may only process it as instructed by Securade. We do not share your information with any other third party for their own marketing purposes.
We may disclose information if required to do so by law, court order, or a lawful request by a South African government authority.
6. How long we keep your information
- Account data — for as long as your account is active, plus 3 years after closure to meet legal and tax record-keeping requirements.
- Assessment reports and data — for as long as your account is active. On account deletion, report data is removed within 30 days.
- Sample-report leads — for up to 2 years from the date of submission, after which records are deleted from our systems.
- Payment records — for 5 years in line with South African tax requirements.
- Server logs — for up to 90 days.
7. Your rights under POPIA
As a data subject, you have the right to:
- Access — request a copy of the personal information we hold about you.
- Correction — request that inaccurate or incomplete information be corrected.
- Deletion — request that we delete your personal information where there is no lawful reason to retain it.
- Objection — object to processing based on our legitimate interests, including direct marketing.
- Withdraw consent — where we process your information on the basis of consent, you may withdraw it at any time.
- Lodge a complaint — if you believe we have not handled your information lawfully, you may complain to the Information Regulator of South Africa at inforegulator.org.za.
To exercise any of these rights, email us at support@securade.co.za with the subject line Privacy Request. We will respond within 30 days.
Opting out of marketing: Reply to any marketing email with UNSUBSCRIBE in the subject line, or email support@securade.co.za asking to be removed from marketing communications.
8. Security
We implement reasonable technical and organisational measures to protect your personal information, including:
- HTTPS encryption on all web properties
- Encrypted storage for sensitive assessment data (AES-256)
- Hashed and salted passwords (bcrypt)
- Access controls limiting who within Securade can view personal data
- Web-accessible directories are restricted from serving stored data files
No system is completely secure. If a breach occurs that is likely to affect your rights, we will notify you and the Information Regulator as required by POPIA.
9. Cookies and tracking
Our website uses Google Analytics 4 to understand how visitors use the site — pages viewed, session duration, and traffic sources. Google Analytics uses cookies to collect this data anonymously. We do not use advertising or retargeting cookies. You can opt out of Google Analytics tracking using the Google Analytics opt-out browser add-on. Server logs may also record IP addresses and page visits for security and performance monitoring.
10. Children's privacy
Securade is a professional business tool. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has submitted information to us, contact us and we will delete it promptly.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where changes are material, notify registered users by email. Continued use of Securade after the effective date constitutes acceptance of the updated policy.
12. Contact us
Questions, requests, or concerns about this policy should be directed to:
- Email: support@securade.co.za
- Phone: +27 81 406 6735
- WhatsApp: wa.me/27814066735
- Hours: Monday – Friday, 8 am – 5 pm (SAST)