Privacy Policy

1. Introduction

Delego Assist (“we,” “our,” or “us”) is committed to protecting your privacy and handling your personal information with the utmost care and respect. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services, in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and, where applicable, the General Data Protection Regulation (GDPR) and the UK General Data Protection Regulation (UK GDPR).

2. Information We Collect

Personal Information

• Name and contact details (email, phone number)
• Company name and business information
• Communication preferences
• Any other information you choose to provide

Automatically Collected Information

• IP address and browser type
• Device and operating system information
• Usage data and analytics
• Cookies and tracking technologies

3. How We Use Your Information

• Provide and deliver our services to you
• Communicate with you and respond to your enquiries
• Manage client relationships and onboarding
• Send you marketing communications where you have provided consent
• Improve our website, services, and user experience
• Monitor and analyse website usage and performance
• Detect, prevent, and investigate fraud or security risks
• Comply with our legal and regulatory obligations

4. Lawful Basis for Processing

We process your personal information on the following lawful bases:

• Your consent
• Performance of a contract with you
• Compliance with a legal obligation
• Our legitimate business interests, provided these do not override your rights and freedoms

5. Sharing of Information

We do not sell your personal information.

We may share your information with:

• Service providers and contractors who assist in our business operations
• Professional advisors such as legal and financial advisors
• Regulatory authorities or law enforcement agencies where required by law
• Third parties in connection with a merger, acquisition, or transfer of business assets

All third parties are required to process your information securely and only for the purposes for which it was shared.

6. International Data Transfers

We may transfer and process your personal information outside of your country of residence. Where such transfers occur, we ensure that appropriate safeguards are in place, including contractual protections and secure processing standards, in accordance with POPIA and, where applicable, GDPR and UK GDPR requirements.

7. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. When your information is no longer required, we will securely delete or anonymise it.

8. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access your personal information
• Correct inaccurate or incomplete information
• Request the deletion of your information where applicable
• Object to or restrict the processing of your information
• Withdraw your consent at any time where processing is based on consent
• Request the portability of your information where applicable
• Lodge a complaint with a relevant data protection authority

To exercise any of these rights, please contact us using the details provided below.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website. A cookie consent banner is displayed upon your first visit, allowing you to:

• Accept all cookies
• Reject non-essential cookies
• Manage your preferences by toggling specific categories

Cookie categories include:

• Essential cookies (always active, required for the website to function)
• Analytics cookies (e.g. Google Analytics, used to understand how visitors use our site)
• Marketing cookies (optional, used for future marketing initiatives)

Non-essential cookies are only activated after you have provided your consent. You may update your preferences at any time by selecting ‘Manage Cookie Preferences’.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit
• Secure systems and hosting infrastructure
• Access controls and authentication
• Regular monitoring, testing, and risk assessments

11. Data Breach Notification

In the event of a personal data breach, we will:

• Take immediate steps to contain and investigate the breach
• Notify affected individuals where there is a risk to their rights and freedoms
• Report the breach to the relevant data protection authority as required by applicable law

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites and encourage you to review their privacy policies independently.

13. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us so that we may delete it.

14. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

16. POPIA Compliance

We process personal information in accordance with the conditions for lawful processing as set out in POPIA. These include the following eight principles:

• Accountability
• Processing limitation
• Purpose specification
• Further processing limitation
• Information quality
• Openness and transparency
• Security safeguards
• Data subject participation

We have implemented internal policies and procedures to ensure ongoing compliance with POPIA, including the handling of data subject requests and the protection of personal information.

17. GDPR and UK GDPR Compliance

For individuals in the European Economic Area (EEA) or the United Kingdom, we comply with the requirements of GDPR and UK GDPR respectively. In particular, we will:

• Provide clear information about how and why your data is processed
• Identify the legal basis for processing your data
• Identify the recipients of your data
• Inform you of any international transfers and the safeguards in place
• Provide information on retention periods or the criteria used to determine them
• Ensure you have full access to your data subject rights as described above
• Inform you of your right to withdraw consent at any time
• Inform you of your right to lodge a complaint with a supervisory authority

Where applicable, we will also inform you about any automated decision-making or profiling that takes place, and provide meaningful information about the logic involved and the significance of such processing.