Privacy Notice

1. Who is responsible for your information

Zabble is the responsible party (the equivalent of a "data controller") for the personal information described here. You can reach our Information Officer at sales@zabble.org for any privacy question, request, or complaint.

2. The personal information we collect

• Information you give us. When you complete the diagnostic at /diagnose or email us, we collect your name, work email, company, optional phone number, and whatever you choose to tell us about your operational challenge and preferred call time.
• Information collected automatically. If, and only if, you consent to analytics cookies, we collect usage information: pages viewed, clicks, approximate location (country/region), device and browser type, and how you arrived. See our Cookie Policy for the detail.

We do not collect special personal information (e.g. health, religion, biometrics), and we do not knowingly collect information from children.

3. Why we use it, and our lawful basis

We will not use your information for a new, incompatible purpose without telling you first and, where required, obtaining your consent.

4. Cookies and analytics

We use a privacy-first, opt-in approach. Until you accept, no non-essential cookies or analytics scripts load. The full breakdown, categories, providers (Google Analytics 4, Microsoft Clarity), and how to change your mind, lives in our Cookie Policy.

5. Who we share it with (operators)

We don't sell your personal information. We share it only with:

• Service providers ("operators") who process information on our behalf under contract, for example, our email provider, and (with your consent) Google for Analytics and Microsoft for Clarity.
• Authorities, where we're legally required to disclose information.

6. Cross-border transfers

Some operators (e.g. Google, Microsoft) process information outside South Africa. Where we transfer personal information across borders, we do so in line with POPIA section 72 - relying on the operator's contractual safeguards and recognised data-protection standards.

7. How we keep it safe

We apply reasonable technical and organisational measures, access controls, encryption in transit, and the principle of collecting only what we need, to guard against loss, misuse, and unauthorised access, as POPIA section 19 requires.

8. How long we keep it

We keep enquiry and client information only as long as needed for the purpose collected, or as the law requires, typically up to 36 months after our last meaningful contact, after which we delete or de-identify it. Analytics data is retained per the settings in Google Analytics 4 (currently 14 months).

9. Your rights under POPIA

You have the right to:

• Ask what personal information we hold about you, and request a copy;
• Ask us to correct or delete information that is inaccurate, irrelevant, or excessive;
• Object to processing based on legitimate interest, and withdraw consent at any time;
• Not be subject to a decision based solely on automated processing;
• Lodge a complaint with the Information Regulator.

To exercise any of these, email sales@zabble.org. Withdrawing analytics consent is one click, use cookie settings or the control on our Cookie Policy page.

10. The Information Regulator

If you're not satisfied with how we've handled your information, you may complain to South Africa's Information Regulator:

• Website: inforegulator.org.za
• Email: POPIAComplaints@inforegulator.org.za

11. Changes to this notice

We'll update this page when our practices change and revise the "last updated" date above. Material changes affecting how we use your information will be made clear.

12. Contact

Questions? Email our Information Officer at sales@zabble.org. We'd rather you ask than wonder.