Privacy Policy

1. Introduction

Worker Permit ("we", "us", "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and purchase our digital products.

This Privacy Policy complies with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African data protection laws.

By using our website and services, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide to us when you:

• Purchase Products: Name, email address, phone number, billing address
• Create an Account: Username, password, email address
• Contact Support: Name, email address, message content, order details
• Subscribe to Newsletter: Email address, name (optional)
• Complete Surveys: Feedback, testimonials, business information (optional)

2.2 Payment Information

Payment processing is handled by secure third-party payment processors (PayFast, Stripe, or similar). We do not store your complete credit card information on our servers. Payment processors collect:

• Credit/debit card numbers
• Billing addresses
• Transaction details

We may receive limited payment information such as the last 4 digits of your card and transaction status for order fulfillment purposes.

2.3 Automatically Collected Information

When you visit our website, we automatically collect certain information:

• Log Data: IP address, browser type, operating system, referring URLs, pages viewed, time spent on pages
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies (see Section 8)
• Device Information: Device type, screen resolution, browser settings
• Location Data: General location based on IP address (city/province level, not precise geolocation)

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Delivery

• Processing and fulfilling your orders
• Delivering digital products via email
• Sending order confirmations and download links
• Providing customer support
• Managing your account and preferences

3.2 Communication

• Responding to your inquiries and support requests
• Sending transactional emails (order confirmations, password resets)
• Sending marketing communications (with your consent)
• Notifying you of product updates or important changes

3.3 Business Operations

• Preventing fraud and ensuring security
• Analyzing website usage and improving user experience
• Conducting market research and analytics
• Complying with legal obligations
• Enforcing our Terms of Service

4. Legal Basis for Processing (POPIA Compliance)

Under POPIA, we process your personal information based on the following lawful grounds:

• Contractual Necessity: To fulfill our contract with you when you purchase our products
• Consent: When you opt-in to marketing communications or provide optional information
• Legitimate Interests: For fraud prevention, website security, and business analytics
• Legal Obligations: To comply with tax laws, consumer protection laws, and other legal requirements

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information with:

5.1 Service Providers

We share information with trusted third-party service providers who assist us:

• Payment Processors: PayFast, Stripe (for payment processing)
• Email Services: Mailchimp, SendGrid (for email delivery)
• Cloud Hosting: Vercel, AWS (for website hosting and file storage)
• Analytics: Google Analytics (for website traffic analysis)
• Customer Support: Help desk software providers

These providers are contractually obligated to protect your information and use it only for specified purposes.

5.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders, subpoenas, or legal processes
• Requests from law enforcement or government authorities
• Protection of our legal rights or safety
• Investigation of fraud or security issues

5.3 Business Transfers

If Worker Permit is involved in a merger, acquisition, or sale of assets, your information may be transferred to the new owner, subject to this Privacy Policy.

6. Your Rights Under POPIA

You have the following rights regarding your personal information:

To exercise your rights, contact us at privacy@workerpermit.co.za. We will respond within 30 days.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: SSL/TLS encryption for data transmission
• Access Controls: Limited employee access to personal information
• Secure Storage: Encrypted databases and secure cloud hosting
• Regular Audits: Security assessments and vulnerability testing
• Password Protection: Hashed and salted password storage

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

Types of Cookies We Use:

• Essential Cookies: Required for website functionality (login sessions, shopping cart)
• Analytics Cookies: Google Analytics to understand website usage (anonymized)
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Track conversions and ad performance (with consent)

You can control cookies through your browser settings. Disabling cookies may affect website functionality.

9. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and support
• Comply with legal obligations (tax records: 5 years)
• Resolve disputes and enforce agreements
• Maintain business records

Retention Periods:

• Customer accounts: Duration of account + 2 years
• Transaction records: 5 years (tax compliance)
• Marketing data: Until consent is withdrawn + 1 year
• Support inquiries: 3 years

After the retention period, we securely delete or anonymize your information.

10. Marketing Communications

We may send you marketing emails about:

• New products and guides
• Special offers and promotions
• Educational content about worker permits and immigration
• Company updates and news

Opt-Out: You can unsubscribe from marketing emails at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your account preferences
• Emailing us at unsubscribe@workerpermit.co.za

Note: You will still receive transactional emails (order confirmations, support responses) even if you opt out of marketing.

11. Third-Party Links

Our website may contain links to third-party websites (government portals, payment processors, social media). We are not responsible for the privacy practices of these external sites.

We recommend reviewing the privacy policies of any third-party sites you visit.

12. Children's Privacy

Our services are intended for individuals 18 years and older. We do not knowingly collect personal information from children under 18.

If we become aware that we have collected information from a child under 18, we will delete it immediately.

13. International Data Transfers

Some of our service providers (e.g., cloud hosting, analytics) may be located outside South Africa. When we transfer your information internationally, we ensure:

• Adequate data protection measures are in place
• Compliance with POPIA cross-border transfer requirements
• Contractual safeguards with service providers

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will:

• Post the updated policy on this page with a new "Last Updated" date
• Notify you via email for significant changes
• Obtain consent if required by law

Your continued use of our services after changes constitutes acceptance of the updated policy.

15. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal information: