Privacy Policy
Last updated: October 13, 2025
Legal Compliance Notice
This privacy policy complies with the Protection of Personal Information Act (POPI Act) of South Africa. ADA Lab Johannesburg is committed to protecting your personal information and privacy rights under South African law.
1. Information We Collect
We collect information you provide directly to us, such as when you:
- Book a workshop or consultation
- Purchase products or services
- Contact us for support
- Subscribe to our newsletter
- Fill out any forms on our website
This information may include:
- Name and contact information (email, phone, address)
- Workshop preferences and requirements
- Communication preferences
- Order and purchase history
Important: We do not collect or store payment card details or banking information. All payments are processed securely through PayFast, our authorized payment service provider, who handles payment information according to their own privacy policy and security standards.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process orders and facilitate product delivery
- Communicate order status and delivery information
- Send you technical notices and support messages
- Respond to your comments and questions
- Send you marketing communications (only with your explicit opt-in consent)
- Monitor and analyze website usage and performance
- Detect and prevent fraudulent activities
- Comply with legal obligations under South African law
Marketing Communications: Under the POPI Act, we require your explicit consent for direct marketing communications. All our forms include an unticked checkbox for marketing emails and newsletters - you must actively choose to opt-in. You can withdraw this consent at any time by unsubscribing or contacting us directly.
Payment Processing: We do not process payments directly. All payment processing is handled by PayFast, a registered payment service provider in South Africa. PayFast processes payment information according to their own privacy policy and PCI DSS security standards.
3. Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited situations:
- With PayFast for secure payment processing (they handle all payment card information)
- With delivery service providers to fulfill your orders
- With our website hosting and email service providers who assist in operating our business
- To comply with legal obligations under South African law
- To protect and defend our rights and property
- With your explicit consent or at your direction
All service providers are contractually required to protect your information and use it only for the specific services they provide to us.
4. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.
5. Data Retention
We retain your personal information for specific periods based on the purpose for which it was collected and legal requirements:
- Customer order records: 5 years as required under the Companies Act and tax legislation
- Workshop booking records: 3 years for service delivery and follow-up purposes
- Marketing consent records: Until consent is withdrawn or 7 years of inactivity
- Contact form inquiries: 2 years unless ongoing communication is required
- Account information: For the duration of your account plus 1 year after closure
After these retention periods, personal information is securely deleted or anonymized. You may request earlier deletion by exercising your rights under the POPI Act.
6. Your Rights Under the POPI Act
Under the Protection of Personal Information Act (POPI Act) of South Africa, you have the following rights:
- Right to Access: Request access to your personal information we hold
- Right to Correction: Request correction of inaccurate or incomplete information
- Right to Deletion: Request deletion of your personal information
- Right to Object: Object to the processing of your personal information
- Right to Data Portability: Request a copy of your data in a portable format
- Right to Withdraw Consent: Withdraw consent for marketing communications at any time
- Right to Complain: Lodge a complaint with the Information Regulator of South Africa
To exercise your rights: Contact us at contact@adalabsouthafrica.com or +27 711700501. We will respond to your request within 30 days as required by the POPI Act.
7. Cookies and Tracking
We use cookies and similar tracking technologies to collect and use personal information about you. Our use of cookies includes:
- Essential cookies: Required for website functionality (always active)
- Analytics cookies: Help us understand usage patterns and improve our website
- Preference cookies: Remember your settings and preferences
Cookie Management: You can manage or disable non-essential cookies through our website's cookie consent banner that appears on your first visit, or through your browser settings. Essential cookies cannot be disabled as they are necessary for the website to function properly. Disabling analytics or preference cookies will not affect your ability to use our core services.
8. Children's Privacy
Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
9. Data Transfers and Storage
Your personal information is stored and processed within South Africa or in countries that provide adequate protection for personal information as recognized under the POPI Act.
We ensure that any international data transfers comply with the cross-border information transfer provisions of the POPI Act.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
11. Contact Us & Information Officer
If you have any questions about this Privacy Policy or wish to exercise your rights under the POPI Act, please contact us:
ADA Lab Johannesburg
Information Officer: Ulrich van Heerden
Email: contact@adalabsouthafrica.com
Phone: +27 711700501
Address: The Style Loft Sandton, Sandton City Shop 112
Upper Level, Corner of Fifth Street & Rivonia Road
Nelson Mandela Square, Johannesburg, South Africa
Regulatory Authority:
Information Regulator (South Africa)
Website: inforegulator.org.za
Email: complaints.IR@justice.gov.za
Phone: +27 12 406 4818
You have the right to lodge a complaint with the Information Regulator if you believe we have not handled your personal information in accordance with the POPI Act.