Introduction
Digitise SA is a free entrepreneur support platform operated by Hodisa SA NPC, a registered South African non-profit company. We are committed to protecting the privacy of every person who uses our platform, visits our website, or interacts with our services.
This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and what your rights are under the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African law.
By using digitisesa.co.za, registering as a member, downloading templates, subscribing to our newsletter, or attending our events, you agree to the terms of this Privacy Policy.
Who we are
Hodisa SA NPC is the responsible party as defined under POPIA. We determine the purpose and means of processing your personal information.
What personal information we collect
We only collect personal information that is necessary for the purposes described in this policy.
Information you provide directly
- Your first name and last name
- Your email address
- Your business name, industry and province (optional, provided during registration)
- Your business stage (starting out, building, scaling)
- Messages you send us via the contact form
- Information you share when registering for events or webinars
Information collected automatically
- Your IP address and approximate location (country or city level)
- Browser type and device type
- Pages you visit on our website and time spent on each page
- How you arrived at our website (search engine, social media, direct link)
- Files you download from our templates library
We do not collect any special personal information as defined under POPIA, including race, health information, religious beliefs, political views, or biometric data.
Why we collect your information and the legal basis
We collect and process your personal information only for specific, lawful purposes. Under POPIA, we are required to have a lawful basis for processing.
To provide the platform and its services
We use your name and email address to create and manage your member account, send you resources you have requested, and enable access to platform features. This is necessary to perform the service you have signed up for.
To send you our newsletter and email updates
If you have subscribed to our mailing list, we use your email address to send newsletters, platform updates, new resource announcements, and event invitations. The lawful basis is your consent. You may withdraw consent at any time by unsubscribing.
To register you for events and webinars
When you register for an event, we use your name and email to confirm your registration, send reminders, and deliver the recording afterwards. This is necessary to fulfil the event registration service.
To respond to your enquiries
When you contact us via the contact form or by email, we use the information you provide to respond to your message. This is in our legitimate interest as an organisation.
To improve the platform
We use anonymised and aggregated usage data to understand which resources are most useful, which pages are visited most often, and where we can improve. This data does not identify you personally.
To comply with legal obligations
We may process your information where required to comply with South African law or to respond to lawful requests from regulatory authorities.
How we use your information
We use your personal information only for the purposes described above. We will not use your information for any incompatible purpose without informing you and, where required, obtaining your consent.
We will never:
- Sell your personal information to any third party
- Share your information with advertisers or use it for targeted advertising
- Use your information to build profiles for commercial resale
- Send you unsolicited commercial communications unrelated to the Digitise SA platform
How long we keep your information
We keep your personal information only for as long as it is necessary for the purposes described in this policy, or as required by law.
| Type of information | Retention period |
|---|---|
| Member account details | Active period plus 12 months after account closure |
| Newsletter subscriber data | Until you unsubscribe, plus 30 days for system processing |
| Event registration data | 24 months from the date of the event |
| Contact form enquiries | 24 months from the date of your enquiry |
| Website usage data (analytics) | 26 months (standard Google Analytics retention) |
| Template download records | 24 months |
When we no longer have a lawful basis to retain your information, we securely delete or anonymise it.
Third parties and data processors
To operate the platform, we use a number of trusted third-party tools and services. These tools may process your personal information on our behalf as data operators under POPIA. We require them to process your data only as instructed.
FluentCRM
Email marketing and contact management. Stores subscriber data on our WordPress server. Privacy policy available at fluentcrm.com.
WordPress and WordPress plugins
Our website runs on WordPress. Plugin data is stored on our hosting server in South Africa or within the applicable data residency of the hosting provider.
Google Analytics
We use Google Analytics to understand website traffic. It collects anonymised usage data. You can opt out using the Google Analytics opt-out browser add-on. Google’s privacy policy is available at policies.google.com.
YouTube
Our video content is hosted on YouTube. When you watch embedded videos on our website, YouTube may collect data in accordance with Google’s privacy policy.
Complianz
Cookie consent and POPIA compliance management. Stores your cookie preferences.
We do not share your personal information with any third party for their own marketing or commercial purposes.
Cookies
Our website uses cookies: small text files stored on your device that help us understand how you use the site and remember your preferences.
Strictly necessary cookies
Required for the website to function correctly. These cannot be disabled. Examples include session cookies and cookie consent preferences.
Analytics cookies
Help us understand how visitors use our website so we can improve it. Only set with your consent.
Functional cookies
Remember your preferences such as language or region settings. Only set with your consent.
You can manage your cookie preferences at any time using the cookie preference centre in the footer of our website, or by adjusting your browser settings. For full details see our Cookie Statement.
Your rights under POPIA
The Protection of Personal Information Act 4 of 2013 gives you the following rights regarding your personal information:
You may request a copy of the personal information we hold about you at any time.
You may ask us to correct any personal information that is inaccurate, incomplete or outdated.
You may ask us to delete your personal information where we no longer have a lawful basis to retain it.
You may object to us processing your personal information for direct marketing purposes at any time.
Where we rely on your consent, you may withdraw it at any time without affecting prior processing.
You may lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za.
To exercise any of these rights, please contact us at info@digitisesa.co.za with the subject line “Privacy Request”. We will respond within 30 days.
Security
We take reasonable steps to protect your personal information from unauthorised access, loss, misuse or alteration. Our measures include:
- Secure HTTPS encryption on all pages of our website
- Restricted access to personal data within our team
- Regular review of data access and security practices
- Use of reputable, security-conscious third-party tools
No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we are committed to protecting your information to the best of our ability.
If we become aware of a data breach that may affect your rights and freedoms, we will notify the Information Regulator and affected individuals in accordance with POPIA requirements.
Children
Our platform is intended for entrepreneurs and adults. We do not knowingly collect personal information from children under the age of 18. If you are under 18, please do not submit personal information without the consent of a parent or guardian.
If we become aware that we have collected personal information from a child without appropriate consent, we will delete it promptly.
Links to other websites
Our website contains links to third-party websites including YouTube, government funding portals, and partner websites. This Privacy Policy applies only to digitisesa.co.za. We are not responsible for the privacy practices of external websites and encourage you to read their privacy policies before providing personal information.
International transfers
We primarily store and process data within South Africa. Where we use third-party tools that may transfer or store data outside South Africa (such as Google Analytics), we ensure that appropriate safeguards are in place and that such transfers comply with POPIA requirements.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the platform, or applicable law. When we make significant changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email.
Your continued use of the platform after any changes constitutes acceptance of the updated policy.
Contact us
If you have any questions about this Privacy Policy, wish to exercise your rights, or want to raise a concern about how we handle your personal information, please contact us:
We aim to respond to all privacy-related requests within 30 days.
Information Regulator
If you are not satisfied with our response to your privacy concern, you have the right to contact the Information Regulator of South Africa:
The Information Regulator (South Africa)
- Website: inforegulator.org.za
- Email: inforeg@justice.gov.za
This Privacy Policy is governed by the laws of the Republic of South Africa.
Effective date: 1 May 2025. Last updated: May 2026. Responsible party: Hodisa SA NPC, operating digitisesa.co.za.