Phase2.co.za (“us”, “we”, or “our”) operates the website https://www.phase2.co.za (the “Service”).

This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data, in compliance with the Protection of Personal Information Act, 2013 (POPIA).

Information Collection and Use

We collect and process your personal information for the purposes of providing and improving our Service, in accordance with the provisions of POPIA.

Types of Personal Information Collected

Identity Information

During your use of the Service, we may collect personal information including, but not limited to:

  • Full name
  • Contact information (such as email address, phone number, postal address)
  • Identification numbers (such as ID number or passport number)
  • Any other information that may identify you directly or indirectly

Usage Information

We also collect information about how you use our Service, such as:

  • IP address
  • Device information (such as device type, operating system)
  • Browser type
  • Usage patterns and preferences

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information.

Purpose of Processing Personal Information

We collect and process your personal information for the following purposes:

  • To provide and maintain our Service
  • To notify you about changes to our Service
  • To allow you to participate in interactive features of our Service when you choose to do so
  • To provide customer support
  • To gather analysis or valuable information so that we can improve our Service
  • To monitor the usage of our Service
  • To detect, prevent and address technical issues

Legal Basis for Processing Personal Information

We process your personal information based on the following legal bases:

  • The performance of a contract: The processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract.
  • Compliance with a legal obligation: The processing is necessary for compliance with a legal obligation to which we are subject.
  • Consent: You have given your consent to the processing of your personal information for one or more specific purposes.
  • Legitimate interests: The processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal information that overrides those legitimate interests.

Data Subject Rights

Under POPIA, you have the following rights regarding your personal information:

  • Right to access: You have the right to request access to the personal information we hold about you.
  • Right to rectification: You have the right to request that we correct any personal information about you that is inaccurate or incomplete.
  • Right to erasure: You have the right to request that we erase your personal information under certain conditions.
  • Right to restrict processing: You have the right to request that we restrict the processing of your personal information under certain conditions.
  • Right to data portability: You have the right to request that we transfer the personal information that we have collected to another organization, or directly to you, under certain conditions.
  • Right to object: You have the right to object to the processing of your personal information under certain conditions.
  • Right to withdraw consent: You have the right to withdraw your consent to the processing of your personal information at any time where we relied on your consent to process your personal information.

Security of Personal Information

We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk of unauthorized access, disclosure, alteration, or destruction of your personal information.

International Data Transfers

Your information, including personal information, may be transferred to — and maintained on — computers located outside of your province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside South Africa and choose to provide information to us, please note that we transfer the data, including personal information, to South Africa and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Retention of Personal Information

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your personal information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.