Privacy Policy

1. Who we are

This Privacy Policy explains how IJN Solutions (Pty) Ltd (registration number 2024/606850/07), trading as TapHub ("we", "us", "our"), processes personal information when you use our website, the tap-to-contact pages we build and host for businesses ("hubs"), and their QR codes.

We are the responsible party (as defined in the Protection of Personal Information Act 4 of 2013, "POPIA") for the personal information described below. You can reach our Information Officer at privacy@taphub.co.za.

2. Who this applies to

This policy covers three groups: people who visit a business hub and choose to make contact; the businesses (our clients) who engage us to build and run their hub; and visitors to our own website.

3. Information we process

We keep the personal information we handle to a minimum. Specifically:

• From hub visitors: if you send an enquiry, the name, contact detail and message you enter are stored so the business you contacted can respond to you and keep track of your request. We use these details only to pass the enquiry to that business and to help them manage it, and you can ask us to delete them at any time.
• Anonymous, aggregate activity: counts of events such as page views, button taps and page load times, with no name, no account, and no cross-site identifier. These are statistics, not profiles.
• From client businesses: the business details you supply (business name, contact numbers, addresses, links, opening hours, logo and images), your account and contact details, and communications with us.
• Billing information: payments are processed by our payment provider (see Processors). We receive confirmation and reference data, not your full card number.
• Technical data: limited server logs (such as IP address and browser type) used for security, fraud prevention and to keep the service running.

4. Why we process it, and our lawful basis

Under POPIA we process personal information only where we have a lawful basis. We rely on:

• Consent: when you submit an enquiry, or opt in to communications. You may withdraw consent at any time.
• Performance of a contract: to deliver, host and support the hub for our clients and to bill for it.
• Legitimate interests: to secure the service, prevent abuse, and produce anonymous, aggregate analytics that help a business understand how their hub performs.
• Legal obligation: to meet tax, accounting and other legal record-keeping duties.

5. How we use AI to build and improve your pages

We use AI-assisted tools to help design, build, test and continually improve the hubs and this platform, so that each business gets the best possible experience for their practice and their customers.

This does not change your privacy. The details in a visitor enquiry are used only to pass the enquiry to the business and to let them manage it, and are never used to train, fine-tune or prompt any AI model. Where AI tools assist with building or improving a hub, they work with the business information the client provides for that purpose, and not with the personal information in hub-visitor enquiries.

6. Where your hub content comes from

When we build or update a hub, we use only information and links that the business has already made publicly available - for example the business name, contact details, opening hours, images and links on its existing website or public social media pages - together with anything the business gives us directly. We do not access private accounts, and we do not gather personal information about a business's customers to build a hub.

A business can ask us to correct or remove any of this content at any time.

7. Sharing and processors

We do not sell personal information. We share it only with service providers (operators, under POPIA) who process it on our behalf under contract and only as needed to run the service. These include:

• Our payment provider (for example PayFast) to take and reconcile payments.
• Our email/transactional-messaging provider, where configured, to deliver service notifications such as reports and reminders.
• Our hosting and infrastructure providers, who store the business content that makes up each hub.
• The AI tool providers that assist us in building and improving hubs, as described above.

We may also disclose information where required by law, or to establish, exercise or defend a legal claim.

8. Cross-border transfers

Some of our processors may store or process information outside South Africa. Where that happens we take reasonable steps, as required by section 72 of POPIA, to ensure the recipient is subject to comparable protection, or we rely on your consent or another permitted ground.

9. Security

We apply reasonable technical and organisational measures to protect personal information, as required by section 19 of POPIA, including transport encryption (HTTPS) and access controls, and we keep the personal information we hold to what is necessary - enquiry details are stored only so the relevant business can respond. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. How long we keep it

We keep personal information only as long as necessary:

• Enquiry details: stored for the business you contacted and kept until they or we delete them - for example once your enquiry has been dealt with, or on request.
• Aggregate analytics: kept on a short rolling window (about 90 days) and then deleted.
• Client account and billing records: kept for the life of the relationship and for as long as the law requires afterwards (for example for tax and accounting).

11. Cookies and tracking

We do not use advertising or cross-site tracking cookies. A single, short-lived browser value may be used so that one visit is not counted twice in our anonymous statistics.

12. Your rights

Subject to POPIA, you have the right to:

• Ask what personal information we hold about you and request access to it.
• Ask us to correct or delete personal information that is inaccurate, irrelevant, excessive or out of date.
• Object to processing, and withdraw consent where processing is based on consent.
• Complain to us, and to lodge a complaint with the Information Regulator.

To exercise these rights, contact privacy@taphub.co.za. Because your enquiry is stored for the business you contacted, you can ask us to access or delete it and we will action that request. Information Regulator (South Africa): complaints.IR@inforegulator.org.za.

13. Children

Our service is directed at businesses and the general public, not at children. We do not knowingly collect personal information from children without the consent of a competent person. If you believe a child has provided us information, contact us and we will address it.

14. Changes to this policy

We may update this policy from time to time. The current version is always shown on this page with its last-updated date. Material changes will be reflected here; your continued use of the service after an update means you accept the revised policy.

15. Contact us

For any privacy question or request, contact our Information Officer at privacy@taphub.co.za. For contact about a specific business, use the contact options on that business's hub.