Privacy notice

Who is responsible for your information

The responsible party is Orchura (Pty) Ltd, registration number 2023/103577/07, at 595 Breed Street, Montana Park, Pretoria, 0182, South Africa. In this notice, "Orchura", "we" and "us" mean that company.

Our Information Officer under the Protection of Personal Information Act, 2013 (POPIA) is Andre Rhoode, reachable at info@orchura.com. Any question about this notice, or any request about your own information, can go there or to info@orchura.com.

What this notice covers

This notice covers the website at orchura.com only. It does not cover the payment service itself. If you go on to become a customer, how we handle information in the course of moving your payments will be set out in the agreement we sign with you, which will say more than this notice does.

What we collect, and why

There is one place on this website where you can give us personal information: the contact form. Everything below is what that form collects.

Your name, work email address and company

So that we know who is asking and can reply to you. All three are required, because we cannot answer an enquiry without them.

What kind of business you are, and what you need the payments to do

So that the person who replies understands the enquiry before the first conversation rather than after it. Both are required.

Supplying this information is voluntary in the sense that nothing obliges you to contact us. If you choose to, all the fields are required, and the consequence of not completing them is simply that the form will not submit and we will not receive your enquiry. You are welcome to email us instead.

We also receive the ordinary technical information that any website receives when you visit it, including your IP address and browser type, because our hosting provider processes it to serve the page and to keep the service secure. We do not use it to build a profile of you.

No law requires us to collect any of this. We collect it because you asked us to get in touch, which is the purpose it is used for and the only purpose it is used for.

What we do not do

• We do not run analytics, advertising or tracking scripts of any kind on this website.
• We do not set tracking or advertising cookies. See the cookies section below.
• We do not sell, rent or share your information with anyone for their own marketing.
• We do not add you to a mailing list, and we do not send marketing email from this form.
• We do not ask for, or want, special personal information or children's information here.
• We make no automated decision about you, and we do not profile you.

Who else handles it

Two service providers process information on our behalf, both under contract and both only for the purpose described here:

Our email delivery provider

Delivers the enquiry from the website to our inbox. It handles the contents of the form in order to deliver it.

Our hosting provider

Serves the website and processes the technical information described above, including server logs.

Both providers operate outside South Africa, which means your information is transferred across the border when you use the form. We rely on the contractual protections in our agreements with them, which require them to protect the information on terms comparable to POPIA and to process it only on our instructions. We will also disclose information where the law requires it, or where we need to establish or defend a legal claim.

Cookies

This website sets one cookie, and only for our own staff. While the site is being worked on, a member of the team can hold a preview link, and the cookie remembers that they are allowed to see the site. It lasts twelve hours, it cannot be read by scripts, and it contains no information about you.

There are no analytics cookies, no advertising cookies and no third-party cookies, and the website does not store anything in your browser beyond that one cookie. That is why you are not being asked to accept anything.

How long we keep it

We keep an enquiry for as long as the conversation it started is live, and for a reasonable period afterwards in case it resumes. If it does not go anywhere, we delete it. If you become a customer, the record moves into the customer relationship and is governed by the agreement we sign and by the record-keeping periods the law sets for a business like ours.

You can ask us to delete an enquiry sooner. See your rights, below.

How we protect it

The website is served over an encrypted connection, and the form is transmitted encrypted. The enquiry is delivered to a mailbox that requires multi-factor authentication, and access is limited to the people who need to answer it. Our providers are chosen partly for their own security posture, and they are contractually required to notify us of a compromise. If a breach were to affect your information, we would notify you and the Information Regulator as POPIA requires.

Your rights

Under POPIA you can ask us to:

• tell you what personal information we hold about you, and give you a copy of it;
• correct anything that is wrong, or complete anything that is missing;
• delete it, or destroy it, where we no longer have grounds to keep it;
• stop processing it, where you object to us doing so.

Write to our Information Officer at the address above. We will need enough information to be sure it is you asking, and we will respond within a reasonable time. There is no charge for asking, although POPIA allows a prescribed fee for producing copies of records.

Complaints

If you are not satisfied with how we have handled your information, please raise it with us first, because in most cases we can put it right faster than anyone else can. You are also entitled to complain to the Information Regulator of South Africa at any time, at Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191, by email to POPIAComplaints@inforegulator.org.za, or through its online portal at eservices.inforegulator.org.za. Complaining to us does not take that right away.

Changes to this notice

If we change what we collect or what we do with it, we will change this notice and update the effective date at the top. If the change is significant and we hold your information, we will tell you directly rather than expecting you to notice.