Privacy Policy

Last updated: October 13, 2025

Legal Compliance Notice

This privacy policy complies with the Protection of Personal Information Act (POPI Act) of South Africa. ADA Lab Johannesburg is committed to protecting your personal information and privacy rights under South African law.

1. Information We Collect

We collect information you provide directly to us, such as when you:

  • Book a workshop or consultation
  • Purchase products or services
  • Contact us for support
  • Subscribe to our newsletter
  • Fill out any forms on our website

This information may include:

  • Name and contact information (email, phone, address)
  • Workshop preferences and requirements
  • Communication preferences
  • Order and purchase history

Important: We do not collect or store payment card details or banking information. All payments are processed securely through PayFast, our authorized payment service provider, who handles payment information according to their own privacy policy and security standards.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process orders and facilitate product delivery
  • Communicate order status and delivery information
  • Send you technical notices and support messages
  • Respond to your comments and questions
  • Send you marketing communications (only with your explicit opt-in consent)
  • Monitor and analyze website usage and performance
  • Detect and prevent fraudulent activities
  • Comply with legal obligations under South African law

Marketing Communications: Under the POPI Act, we require your explicit consent for direct marketing communications. All our forms include an unticked checkbox for marketing emails and newsletters - you must actively choose to opt-in. You can withdraw this consent at any time by unsubscribing or contacting us directly.

Payment Processing: We do not process payments directly. All payment processing is handled by PayFast, a registered payment service provider in South Africa. PayFast processes payment information according to their own privacy policy and PCI DSS security standards.

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited situations:

  • With PayFast for secure payment processing (they handle all payment card information)
  • With delivery service providers to fulfill your orders
  • With our website hosting and email service providers who assist in operating our business
  • To comply with legal obligations under South African law
  • To protect and defend our rights and property
  • With your explicit consent or at your direction

All service providers are contractually required to protect your information and use it only for the specific services they provide to us.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

5. Data Retention

We retain your personal information for specific periods based on the purpose for which it was collected and legal requirements:

  • Customer order records: 5 years as required under the Companies Act and tax legislation
  • Workshop booking records: 3 years for service delivery and follow-up purposes
  • Marketing consent records: Until consent is withdrawn or 7 years of inactivity
  • Contact form inquiries: 2 years unless ongoing communication is required
  • Account information: For the duration of your account plus 1 year after closure

After these retention periods, personal information is securely deleted or anonymized. You may request earlier deletion by exercising your rights under the POPI Act.

6. Your Rights Under the POPI Act

Under the Protection of Personal Information Act (POPI Act) of South Africa, you have the following rights:

  • Right to Access: Request access to your personal information we hold
  • Right to Correction: Request correction of inaccurate or incomplete information
  • Right to Deletion: Request deletion of your personal information
  • Right to Object: Object to the processing of your personal information
  • Right to Data Portability: Request a copy of your data in a portable format
  • Right to Withdraw Consent: Withdraw consent for marketing communications at any time
  • Right to Complain: Lodge a complaint with the Information Regulator of South Africa

To exercise your rights: Contact us at contact@adalabsouthafrica.com or +27 711700501. We will respond to your request within 30 days as required by the POPI Act.

7. Cookies and Tracking

We use cookies and similar tracking technologies to collect and use personal information about you. Our use of cookies includes:

  • Essential cookies: Required for website functionality (always active)
  • Analytics cookies: Help us understand usage patterns and improve our website
  • Preference cookies: Remember your settings and preferences

Cookie Management: You can manage or disable non-essential cookies through our website's cookie consent banner that appears on your first visit, or through your browser settings. Essential cookies cannot be disabled as they are necessary for the website to function properly. Disabling analytics or preference cookies will not affect your ability to use our core services.

8. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

9. Data Transfers and Storage

Your personal information is stored and processed within South Africa or in countries that provide adequate protection for personal information as recognized under the POPI Act.

We ensure that any international data transfers comply with the cross-border information transfer provisions of the POPI Act.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us & Information Officer

If you have any questions about this Privacy Policy or wish to exercise your rights under the POPI Act, please contact us:

ADA Lab Johannesburg

Information Officer: Ulrich van Heerden

Email: contact@adalabsouthafrica.com

Phone: +27 711700501

Address: The Style Loft Sandton, Sandton City Shop 112

Upper Level, Corner of Fifth Street & Rivonia Road

Nelson Mandela Square, Johannesburg, South Africa

Regulatory Authority:

Information Regulator (South Africa)

Website: inforegulator.org.za

Email: complaints.IR@justice.gov.za

Phone: +27 12 406 4818

You have the right to lodge a complaint with the Information Regulator if you believe we have not handled your personal information in accordance with the POPI Act.