Privacy Notice

Mazonite360 (Pty) Ltd, trading as Mazonite360, is the responsible party (data controller) for the personal information described in this notice. We process personal information in accordance with the Protection of Personal Information Act (POPIA).

• Account data (name, email address, password credentials) — to create and secure your account. Legal basis: performance of our contract with you.
• Business profile data (business name, industry, company type, employee count, province, turnover band) — to generate your applicable compliance requirements. Legal basis: contract performance.
• Compliance content (uploaded certificates, policies, document metadata, action items, notes) — to provide document control and deadline tracking. Legal basis: contract performance.
• Support requests (the details you submit when requesting a specialist) — to match you with a partner. Legal basis: contract performance.
• Usage and device data (log data, IP address, browser and device identifiers) — for security, fraud prevention and product improvement. Legal basis: our legitimate interests.
• Aggregated, de-identified trend data — used to produce industry benchmarks and thought-leadership reports. This is reported only in aggregate and never identifies your business. Legal basis: legitimate interests.
• Marketing communications — only where you have consented. You can withdraw consent at any time.

• Service providers and operators — hosting, database, email and analytics providers who process data on our instruction.
• PayFast (Payfast (Pty) Ltd), our South African payment gateway, for processing subscription payments, recurring debits and refunds. Card data is handled directly by PayFast under PCI-DSS and is never stored on our systems.
• Partner specialists — only the request details you choose to submit, and only for the category of support you request.
• Professional advisers (legal, accounting) and authorities where required by law.

Some of our service providers process data outside South Africa. Where this happens we rely on lawful transfer mechanisms and require appropriate contractual safeguards consistent with POPIA.

We keep account and compliance data for as long as your account is active, and for up to 12 months after closure to handle disputes and meet legal obligations. Billing records are retained for the period required by tax law. After that, data is deleted or irreversibly anonymised.

Under POPIA you may request access to your personal information, correction or deletion of it, object to certain processing, withdraw consent, and lodge a complaint with the Information Regulator of South Africa. To exercise any of these rights, contact admin@mazonite360.com. We aim to respond within 30 days.

We apply appropriate technical and organisational measures, including encryption in transit, row-level access controls in our database, and role-based access to administrative functions. No system is perfectly secure, but we work to protect your information and will notify you and the Regulator of a reportable breach.

We use strictly necessary cookies and local browser storage to keep you signed in and remember your preferences. We do not use advertising cookies. You can clear or block cookies in your browser, but the Service may not function correctly without the essential ones.

Privacy queries: admin@mazonite360.com