Privacy Policy

Effective Date: 07 Oct 2025

This Privacy Policy sets out the terms under which KrekTech Pty (Ltd) (referred to as "we", "us", or "our") processes the Personal Information of users (referred to as "you" or "data subject") of our platform (the "Service").

We are committed to protecting your privacy and ensuring your Personal Information is collected and processed lawfully, in accordance with the **Protection of Personal Information Act, 4 of 2013 (POPIA)** of the Republic of South Africa.

1. The Information We Collect (What)

We collect and process various types of Personal Information necessary to provide and improve the Service.

1.1 Registration and Identity Information

This information is collected when you create an account:

• Identity Data: Full Name, Surname, Email Address, Mobile Number.
• Authentication Data: Password (stored securely in an encrypted format).
• Location Data: General location (City/Province) to facilitate matching with local legal professionals.

1.2 Case Information (Sensitive Personal Information)

This information is collected when you create a new legal case (an "Artifact") on the platform. This is considered Sensitive Personal Information under POPIA.

• Detailed description of the legal matter.
• Dates, involved parties, and relevant documents you choose to upload.
• The legal category or area of law (e.g., family law, corporate, criminal).

2. Purpose of Processing (Why We Collect It)

We process your Personal Information for the following specific purposes:

1. To Provide the Core Service: To establish and manage your user account, and to link your case information legal professionals based on your legal need and location.
2. Communication: To send essential service notifications, updates about your case status, and responses to your inquiries.
3. Compliance and Security: To comply with our legal obligations (including POPIA) and to protect our systems and your data against fraud, unauthorized access, or illegal activity.
4. Improvement: To analyze usage patterns and improve the functionality, design, and user experience of the platform.

3. Sharing and Disclosure of Information

We will **never** sell your Personal Information.

3.1 With Legal Professionals (Operators)

When you submit a case, your relevant Case Information is shared with registered practitioners who act as Operators (as defined by POPIA). This sharing is done solely for the purpose of allowing them to assess your matter and decide whether your matter is worth pursuing.

3.2 Service Providers

We may use third-party service providers (e.g., cloud hosting, database management) who assist us in operating the Service. These providers are bound by strict contractual obligations to handle your data securely and confidentially, and only process it according to our instructions.

3.3 Legal Requirements

We may disclose Personal Information if required to do so by South African law, in response to a court order, or to protect our rights, property, or safety, or the safety of others.

4. Security and Data Retention

4.1 Security Measures

We implement reasonable physical, technical, and administrative safeguards to prevent the loss, misuse, unauthorized access, disclosure, or alteration of Personal Information, including:

• Use of encryption for data transmission (SSL/TLS).
• Access controls and authentication protocols for internal systems.
• Secure hosting environments located in a region compliant with POPIA standards.

4.2 Data Retention

We retain your Personal Information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

5. Your Rights as a Data Subject (POPIA Rights)

Under POPIA, you have the right to:

1. Be Informed: Know what data is being collected (addressed by this Policy).
2. Access: Request access to the Personal Information we hold about you.
3. Correction/Deletion: Request the correction or deletion of your Personal Information that is inaccurate, irrelevant, excessive, outdated, incomplete, misleading, or obtained unlawfully.
4. Objection: Object, on reasonable grounds, to the processing of your Personal Information (e.g., processing for direct marketing).
5. Lodge a Complaint: Complain to the Information Regulator of South Africa if you believe we have not processed your Personal Information lawfully.

6. Information Officer Contact Details (POPIA Requirement)

7. Governing Law

This Privacy Policy and all matters arising from it shall be governed by and interpreted in accordance with the laws of the Republic of South Africa. You consent to the jurisdiction of the South African courts in the event of any dispute.

8. Changes to this Policy

We reserve the right to modify this Privacy Policy at any time. Any changes will be effective immediately upon posting the revised policy on the Service. We encourage you to review this Policy periodically.