Back to Legal Hub

Privacy Notice

Last updated: February 2026

This notice explains how Digicards processes personal information in line with POPIA and applicable privacy laws.

1. Scope and Purpose

This notice applies to Digicards users, visitors, and customers across our website and platform services.

It describes what data we process, why we process it, and the choices available to you.

2. Data We Collect

  • Account data: name, email, auth identifiers, profile credentials.
  • Profile data: business details, contact fields, uploaded media, social links, and content you publish.
  • Usage and analytics data: interactions, visits, link clicks, and device/browser metadata.
  • Payment metadata: transaction references, amounts, provider IDs, billing configuration (not full card details).
  • Support and communications data you provide to our team.

3. How We Use Data

  • Provide and maintain the Digicards platform and subscription features.
  • Authenticate users and secure accounts.
  • Process subscription billing and payment events.
  • Provide customer support and operational notifications.
  • Measure performance, improve reliability, and prevent abuse or fraud.

4. Lawful Basis (POPIA)

We process personal information where necessary to perform a contract, comply with legal obligations, and protect legitimate business interests.

Where required, we rely on consent and provide controls to withdraw it, subject to legal and operational constraints.

5. Sharing and Operators

We share personal information only where required to deliver the service or comply with law, including trusted operators and service providers.

  • Authentication provider(s)
  • Payment provider(s)
  • Cloud hosting and storage providers
  • Email and notification service providers
  • Analytics and monitoring tools

We do not sell personal information.

6. Retention and Deletion

We retain data for as long as needed to deliver the service, comply with legal obligations, resolve disputes, and enforce agreements.

When data is no longer required, we delete or de-identify it according to our retention standards.

7. Cross-Border Processing

Some operators may process data outside South Africa. Where this happens, we implement suitable safeguards and contractual protections.

8. Data Subject Rights

Depending on applicable law, you may request access, correction, deletion, objection, restriction, and portability of your personal information.

We may need to verify your identity before processing certain requests.

9. Children and Minors

The platform is not directed at children. Users must be legally able to enter a binding agreement to use paid services.

10. Contact and Complaints

For privacy requests or complaints, email support@digicards.co.za.