Last updated: 21 October 2026
1. Who is responsible
BiodiComply SA (Pty) Ltd, Registration No. 2026/657687/07, 72 Gordon Avenue, Linbro Park, Sandton, 2196, South Africa, is the responsible party for your personal information under the Protection of Personal Information Act (POPIA).
Information Officer: Irene Nompini Tsele · irenetsele@gmail.com
2. What we collect
- Account: your mobile number and a PIN. The PIN is stored only in scrambled (hashed) form; we cannot read it.
- Permit checks: the species, province and activity answers you give, optionally the location you share, and the result we produce.
- Credits and payments: your credit balance, what you bought and spent, and the payment provider's reference. We do not receive or store your card or bank login details. If you pay by bank transfer or PayShap, our bank statement shows the payer's name, account details and payment reference, which we use to match your payment.
- WhatsApp: if you use our WhatsApp service, your WhatsApp number and the state of your conversation, so we can continue where you stopped.
- Technical: basic server logs (such as time and IP address) used for security and fixing faults.
3. Why we use it
- To run your account and deliver the permit check you asked for.
- To sell and track credits, take payment and handle refunds.
- To keep the service secure, prevent abuse and fix problems.
- To meet legal and accounting duties.
We do not sell your information and do not use it for advertising.
4. Who we share it with
Only service providers we need to run the service, who may only use the information for that purpose:
- PayFast (Network International) and Ozow - payment processing. Your bank takes part when you pay by EFT or PayShap.
- Hosting and database providers - to run the website and store data. Some servers may be outside South Africa; we only use providers that protect data to a standard comparable to POPIA.
- OpenStreetMap (Nominatim) - if you share a location, the coordinates are sent to find the district and province.
- WhatsApp (Meta) - to deliver messages if you use WhatsApp.
We may also disclose information when the law requires it.
5. How long we keep it
We keep account and check information while your account is active. Payment and credit records are kept for as long as financial and tax law requires (currently 5 years). You can ask us to delete your account and check history; records we must keep by law will be kept only for that purpose.
6. Your rights
You may ask to see the information we hold about you, correct it, delete it, or object to how we use it. Contact us at the details above and we will respond within 30 days. If you are not satisfied, you may complain to the Information Regulator of South Africa (inforegulator.org.za).
7. Security
We use encrypted connections (HTTPS), store PINs only as hashes and limit who can access the data. No system is perfectly secure; if there is a breach that affects you, we will tell you and the Information Regulator as the law requires.
8. Browser storage
The website stores your sign-in token and mobile number in your browser so you stay signed in. It does not use advertising cookies. Signing out removes them.
9. Children
The service is not meant for people under 18, and we do not knowingly collect their information.
10. Changes
We may update this policy. The date at the top shows the latest version.