Image by Jacques Nel sourced from Unsplash

PRIVACY POLICY (POPIA-specific)

Last Updated: 13 March 2026

1. WHO WE ARE

SCALINC. is a South African-based technology studio. We create applications that address widespread social challenges by building coordination layers where they are missing. Our business model designs for community co-ownership of solutions, recognising that it is the community's data and needs that inform the solutions we build.

Email: hello@SCALINCthefuture.co.za

2. OUR COMMITMENT TO YOUR PRIVACY

We are committed to protecting your privacy and ensuring that your personal information is collected, used, shared, and stored in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and the 2025 POPIA Regulations .

3. WHAT PERSONAL INFORMATION WE COLLECT

We may collect the following personal information:

- Contact details: name, email address, telephone number, physical address

- Demographic information: information about the communities you represent or belong to

- Usage data: how you interact with our applications and websites

- Communications: records of your interactions with us

- Technical information: IP address, device information, browser type 

We collect information directly from you when you complete forms, correspond with us, or use our applications. Where you provide us with information about third parties, you warrant that you have obtained all necessary consents and have the authority to do so .

4. PURPOSE OF PROCESSING

We process your personal information for the following purposes:

- To develop community co-owned solutions: To understand community needs and develop applications that address social challenges

- To communicate with you: To respond to enquiries, provide information about our projects, and send administrative notices

- To improve our services: To analyse usage patterns and enhance user experience

- To comply with legal obligations: To meet our responsibilities under applicable laws 

We will only process your personal information for purposes that are specific, explicitly defined, and lawful.

5. COMMUNITY CO-OWNERSHIP AND DATA RIGHTS

Our model is built on community co-ownership. This means:

- The communities whose data and needs inform our solutions have ongoing rights in relation to that data

- Where solutions are co-owned with communities, data governance arrangements will be documented in separate agreements that supplement this policy

- We recognise that personal information belongs to the data subject, and our role is that of a responsible party acting on behalf of the communities we serve

 6. LEGAL BASIS FOR PROCESSING

We process your personal information on one or more of the following legal bases:

- Consent: Where you have given us clear permission to process your data for a specific purpose

- Contractual necessity: Where processing is necessary to perform a contract with you

- Legal obligation: Where we must process data to comply with the law

- Legitimate interest: Where processing is necessary for our legitimate interests and does not override your fundamental rights 

7. CONSENT AND DIRECT MARKETING

Where we rely on consent as a legal basis, you have the right to withdraw your consent at any time. For direct marketing communications, we obtain your explicit consent before processing your personal information. Pre-ticked boxes or opt-out models are not sufficient under the 2025 POPIA Regulations . You may opt out of marketing communications at any time by contacting us.

8. DISCLOSURE OF PERSONAL INFORMATION

We may share your personal information with:

- Operators: Third-party service providers who process data on our behalf under written contract, subject to appropriate data governance frameworks

- Community co-owners: As contemplated in community co-ownership arrangements, subject to appropriate data governance frameworks

- Regulators and public bodies: Where required by law or to comply with a legal obligation 

We do not sell your personal information to third parties. Where we share information with operators, we ensure they agree to protect your information in accordance with POPIA .

9. INTERNATIONAL TRANSFERS

If we transfer your personal information outside South Africa, we will ensure that appropriate safeguards are in place, such as binding corporate rules or standard data protection clauses, and that the transfer complies with POPIA.

10. DATA SECURITY

We take appropriate technical and organisational measures to secure your personal information and protect it from unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:

- Access controls and authentication mechanisms

- Firewalls and encryption where appropriate

- Regular security reviews

- Staff training on data protection 

 11. DATA RETENTION

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law . When we no longer need your information, we will securely delete or anonymise it.

12. YOUR RIGHTS

Under POPIA, you have the following rights:

- Right to access: You may request a copy of the personal information we hold about you

- Right to rectification: You may request correction of inaccurate or incomplete information

- Right to deletion: You may request deletion of your information where we are no longer authorised to retain it

- Right to object: You may object to the processing of your information on reasonable grounds

- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time 

These requests may be submitted at no cost via email. We will respond within a timeframe required by law (maximum 30 days of receipt).

To exercise your rights, contact: hello@SCALINCthefuture.co.za

13. COMPLAINTS

If you are not satisfied with how we handle your personal information or any request you have made, you have the right to lodge a complaint with the Information Regulator:

Information Regulator (South Africa)

Physical Address: P.O Box 31533, Braamfontein, Johannesburg, 2017

Complaints Email: complaints.IR@justice.gov.za

Website: www.justice.gov.za/inforeg

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The latest version will always be available on our website. We will notify you of material changes where required by law .

15. COOKIES

Our website may use cookies to improve your experience. By using our website, you consent to our use of cookies in accordance with this policy. You may disable cookies through your browser settings, but this may affect website functionality.