Privacy Policy

Effective date: 24 July 2026

This Privacy Policy explains how i60 Group (Pty) Ltd (“i60”, “we”, “us”, “our”) collects, uses, discloses and protects your personal information when you visit i60.co, contact us, or use our software products and services. We are the responsible party for the processing of your personal information as defined in the Protection of Personal Information Act, 4 of 2013 (POPIA).

01Who we are

The responsible party for your personal information is the operator set out below. Our Information Officer — as required by POPIA — is our Chief Executive Officer, who can be reached at privacy@i60.co.

02Information we collect

We only collect the personal information we need to run our business and provide our services:

Information you give us

• Enquiries & contact form — your name, e-mail address, company, and the content of your message.
• Account & onboarding — where you register for a product, your name, work e-mail, organisation, role and account credentials.
• Billing information — the details needed to bill a subscription. Card data is entered directly with our payment processor, Paystack, and is not stored on our servers. We may retain limited records such as your billing name, invoice history and a masked card reference.
• Support & correspondence — any information you include when you contact support.

Information we collect automatically

• Usage & device data — IP address, browser type, device information, pages viewed and referring URLs, collected through analytics and server logs.
• Cookies & similar technologies — see section 5.

03How & why we use it

We process your personal information to:

• respond to your enquiries and provide the products or services you request;
• create and administer your account, and authenticate you when you sign in;
• process payments, manage subscriptions and send invoices and billing notices;
• provide customer support and service communications;
• screen enquiries and transactions for spam, fraud and abuse;
• maintain, secure, and improve our website and services;
• comply with our legal, regulatory, tax and accounting obligations; and
• send you service updates and, where you have opted in, occasional product news (you can opt out at any time).

04Lawful basis for processing

Depending on the situation, we rely on one or more of the POPIA justifications for processing:

• Performance of a contract — to deliver a service or account you have signed up for;
• Consent — for example, where you submit an enquiry or opt in to marketing;
• Legal obligation — to meet tax, accounting and other statutory duties; and
• Legitimate interests — to secure our services, prevent fraud and abuse, and operate our business responsibly, provided your rights do not override those interests.

05Cookies & analytics

We use a small number of cookies and similar technologies to run the site and understand how it is used. We use Google Analytics to measure traffic and improve the site; it sets cookies and processes usage data on our behalf. You can block or delete cookies in your browser settings, and you can opt out of Google Analytics using Google's browser add-on. Blocking some cookies may affect how the site works.

06Who we share it with

We do not sell your personal information. We share it only with trusted third-party operators who process it on our behalf, under contract and only as needed to provide their service:

We may also disclose personal information where required by law, to enforce our terms, or to protect our rights, users or the public.

07Cross-border transfers

Some of our operators (listed above) are located outside South Africa, including in the United States. Where your personal information is transferred across borders, we do so in accordance with section 72 of POPIA — relying on the operator being subject to laws or binding agreements that provide an adequate level of protection, or on your consent, or because the transfer is necessary to perform our contract with you.

08How we protect it

We take reasonable and appropriate technical and organisational measures to safeguard personal information against loss, unauthorised access and misuse — including encryption in transit (HTTPS), access controls, and vetted service providers. Card payments are handled by Paystack, a PCI-DSS-compliant payment processor. No system is perfectly secure, but if a data breach affecting your personal information occurs, we will notify you and the Information Regulator as required by POPIA.

09How long we keep it

We keep personal information only for as long as necessary for the purposes described in this policy, or for as long as the law requires (for example, tax and financial records must generally be kept for at least five years). When it is no longer needed, we securely delete or de-identify it.

10Your rights

Under POPIA you have the right to:

• ask what personal information we hold about you and request access to it;
• ask us to correct or delete personal information that is inaccurate, irrelevant, excessive or out of date;
• object to the processing of your personal information in certain circumstances;
• withdraw consent where we rely on it (this will not affect processing already carried out); and
• lodge a complaint with the Information Regulator.

To exercise any of these rights, contact us at privacy@i60.co. You also have the right to complain to South Africa's data-protection regulator:

11Children

Our services are intended for businesses and adults. We do not knowingly collect personal information from children under 18 without the consent of a parent or guardian. If you believe a child has provided us with personal information, please contact us and we will delete it.

12Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “effective date” above and, for material changes, take reasonable steps to notify you. Continued use of our website or services after an update means you accept the revised policy.

13Contact us

Questions about this policy or your personal information? Reach our Information Officer at privacy@i60.co, or write to us using the operator details above.