Last updated: 8 September 2026
This Privacy Policy explains how Brandon Holdings ("we", "us") collects, uses, and discloses personal information in connection with the Brandon Holdings Reward App ("the Service"), in compliance with the Constitution of the Republic of South Africa, 1996, and the Protection of Personal Information Act 4 of 2013 ("POPIA"). By using the Service, you consent to the practices described here.
Brandon Holdings is the Responsible Party for purposes of POPIA. Our Information Officer can be contacted at brandonholdings.inc@gmail.com. Requests under section 23 or 24 of POPIA should be submitted in writing to this address.
We collect personal information that you provide directly, including: business owner name, email address, phone number, business name and registration details; staff member names and email addresses; and customer names, phone numbers, email addresses, and birthdays as captured by Businesses using the Service. We also collect usage data such as device information and access logs.
We process personal information for the following lawful purposes: providing and maintaining the Service; processing subscription payments; operating loyalty programmes on behalf of Businesses; sending service-related and promotional communications (with consent where required); preventing fraud and misuse; and complying with legal obligations. Processing is based on the lawful grounds set out in section 11 of POPIA, including consent, performance of a contract, and legitimate interests.
We share personal information with our service providers, including Payfast (payment processing), cloud hosting providers, and email delivery services, under agreements that require confidentiality and POPIA compliance. We may disclose information where required by law, court order, or competent authority in South Africa. We do not sell personal information.
Some service providers may process data outside South Africa. Where this occurs, we ensure adequate safeguards as required by Chapter 5 of POPIA, including contractual assurances that the recipient provides a level of protection equivalent to that required under POPIA.
We implement reasonable technical and organisational measures to safeguard personal information against loss, unauthorised access, and misuse, in line with section 19 of POPIA. These include encryption, access controls, and regular review. However, no system is completely secure.
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Customer data is retained for the duration of the Business's subscription and a reasonable period thereafter, after which it is deleted or de-identified.
You have the right to access and correct your personal information, to object to processing, to withdraw consent (where processing is based on consent), and to lodge a complaint with the Information Regulator (www.informationregulator.org.za) if you believe we have infringed your rights under POPIA.
Direct marketing by electronic means is conducted in accordance with section 69 of POPIA and the Electronic Communications and Transactions Act 25 of 2002. We will not send unsolicited marketing communications, and you may opt out at any time by following the unsubscribe link or contacting us.
The Service is not directed at children under 18. We do not knowingly collect personal information from children without parental consent as required by POPIA. If you believe a child has provided us with personal information, please contact us so we can delete it.
In the event of a security compromise as defined in section 22 of POPIA, we will notify the Information Regulator and affected data subjects as soon as reasonably possible, in accordance with the requirements of POPIA.
We may update this Privacy Policy from time to time. We will notify material changes through the App or by email. Continued use after changes constitutes acceptance.
For questions about this Privacy Policy or to exercise your rights, contact us via the contact form on our website or at brandonholdings.inc@gmail.com.