Privacy notice

1. Who we are

declareZA is a product of Didusec (Pty) Ltd (Reg. No. 2014/111799/07), Wembley, 1st Floor, The Campus, 57 Sloane Street, Bryanston, Sandton 2191, South Africa. In this notice, "we" means Didusec. This notice explains how we handle personal information on the declareZA website and, from launch, in the declareZA platform. It sits alongside the Didusec privacy policy, which applies to Didusec as a whole.

declareZA is independent. It is not part of the Department of Employment and Labour, the UIF, Home Affairs or SARS.

2. Our two roles under POPIA

3. What we collect on this website

• Information you email us. Our sign-up and contact buttons open your own email program. We receive only what you choose to send: usually your name, email address, business name and message.
• Self-check answers. The readiness self-check runs in your browser. Your answers are not sent to us unless you choose "Email my results".
• Basic usage statistics. We use Cloudflare Web Analytics, which counts page visits without cookies and without building a profile of you.
• Fonts. Pages load fonts from Google Fonts, which means your browser's IP address is visible to Google when the fonts load.

We do not ask for ID numbers, passport or permit details, banking details or passwords on this website.

4. Why we use it

• To reply to your enquiry and tell you when declareZA launches (on the basis of your request or consent).
• To understand which pages are useful and improve the site (our legitimate interest).

We do not sell personal information, and we do not use website enquiries for unrelated marketing. You can ask to be removed from the early-access list at any time.

5. How the platform will protect your workers' records

• Records are stored on Amazon Web Services in Cape Town (af-south-1), encrypted at rest and in transit.
• Each business sees only its own records, with role-based access and a full audit trail.
• Identity, passport and permit information is never sent to AI features.
• Some AI-assisted features may use processing outside South Africa. Where they do, only information that is not identity, passport or permit data is involved, and the transfer is made under the safeguards that section 72 of POPIA requires.
• declareZA has no nationality field, filter or report.

6. Who we share information with

We use service providers that act for us under contract: Amazon Web Services (hosting), Cloudflare (website delivery and analytics) and our email provider. From launch, ID verification checks you request are passed to our verification partner. We share information with authorities only where the law requires it.

7. How long we keep it

We keep early-access and enquiry emails until launch plus 12 months, or until you ask us to delete them, whichever is sooner. Platform records are kept for as long as your business instructs us and the law requires (for example, BCEA records for at least three years).

8. Your rights

You may ask us to confirm what personal information we hold about you, to correct or delete it, or to stop processing it. You may also object to direct marketing. Email [email protected]. We will respond within a reasonable time and in any event within the periods the law sets.

If you are not satisfied with our response, you may complain to the Information Regulator (South Africa): inforegulator.org.za.

9. Contact and Information Officer

We may update this notice. The effective date at the top shows when it last changed.