Privacy Policy
This policy explains how ComplyMate handles personal information when you use our website and POPIA compliance assessment.
Last updated: 26 May 2026
1. Who we are
ComplyMate (https://complymate.co.za) is operated by Thannlab Pty Ltd, a company registered in the Republic of South Africa. ComplyMate provides POPIA compliance assessment tools for South African businesses. For privacy enquiries, contact us at hello@complymate.co.za.
2. What information we collect
Free assessment (no account): Your quiz answers are processed in your browser and stored temporarily in session storage on your device until you create an account.
Account holders: When you register, we store your email address, name (if provided), assessment answers, scores, and subscription status in our database (Supabase, EU/US hosting per provider terms).
Payments: Card and payment details are processed by Paystack. We receive payment confirmation, transaction references, and billing status — not your full card number.
Feedback: Optional product feedback you submit after an assessment (ratings, feature preferences, comments).
Website usage: We may collect standard analytics data such as pages visited, browser type, and approximate location to improve our service.
3. How we use your information
We use personal information to:
- Provide the POPIA compliance assessment and reports
- Communicate with you about your account or purchases
- Improve our website and services
- Comply with legal obligations under POPIA and other applicable law
4. Lawful basis
We process personal information based on your consent, contractual necessity (when you purchase services), and our legitimate interest in operating and improving ComplyMate, always in accordance with POPIA.
5. Sharing and processors
We do not sell your personal information. We use trusted processors who handle data on our behalf under appropriate agreements, including:
- Supabase — authentication and database hosting
- Paystack — payment processing
- Brevo — transactional email delivery
- Vercel — website hosting
6. Retention
Free assessment data in your browser is cleared when you close your tab or retake the assessment. Account and report data will be retained only as long as necessary for the purpose collected or as required by law.
7. Your rights under POPIA
You have the right to access, correct, delete, or object to processing of your personal information, and to lodge a complaint with the Information Regulator of South Africa. Contact hello@complymate.co.za to exercise your rights.
8. Security
We implement appropriate technical and organisational measures to protect personal information. No method of transmission over the internet is 100% secure.
9. Changes
We may update this policy from time to time. Material changes will be posted on this page with an updated date.