Privacy Policy
Effective 1 July 2026 · Purple Ray Group (Pty) Ltd · Information Officer: Josias Tlou (Interim) · inforeg@purpleraygroup.co.za
1. Introduction
Purple Ray Group (Pty) Ltd ("we", "us", "our") respects your privacy and is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and, where applicable, the General Data Protection Regulation (GDPR). By accessing or using our services, you acknowledge that you have read, understood, and agree to this Privacy Policy.
2. Information We Collect
We collect the following categories of personal information:
| Category | Examples | Purpose |
|---|---|---|
| Identity | Name, ID number, DOB, gender, nationality | Account creation, verification, legal compliance |
| Contact | Email, phone, WhatsApp, address | Communication, fulfilment, support |
| Credentials | Username, password | Authentication |
| Payment | Bank/card (via PCI-DSS gateway) | Transactions, refunds, commissions |
| Profile | Photos, bio, social handles | Personalisation, marketing |
| Business | Company name, reg number, VAT | B2B, reseller, licensing |
| Device/Usage | IP, browser, pages, features used | Security, fraud prevention, analytics |
3. How We Use Information
We process personal information for the following purposes:
- To provide and improve our services.
- To process transactions and send service communications.
- To send marketing communications (with consent; opt-out available).
- To ensure security and legal compliance.
- For AlibiSafe and SafeGuard SA, to support privacy-aware evidence integrity and community-safety workflows as those products develop.
4. Special Personal Information
We process biometric, health, or criminal-behaviour data (e.g., safety evidence from AlibiSafe) only with your explicit consent and strict security (encryption, hashed chains). You may withdraw consent at any time, subject to legal retention obligations.
5. Sharing & Operators
We share data only with vetted operators under POPIA-compliant agreements, and with authorities where legally required. We do not sell your personal information.
- Subprocessors: Cloud hosting (Vercel/Firebase), email (Proton), form handling (Formspree) under POPIA-aligned terms.
- Institutional workflows: Any future data-sharing or referral pathway is subject to formal agreements, governance and applicable law.
- Authorities: Where legally compelled.
6. International Transfers
Where data is processed outside South Africa (e.g., cloud regions), we rely on GDPR-equivalent safeguards and POPIA Section 72 requirements.
7. Data Retention
We retain personal information only as long as necessary for the purpose collected or as required by law, then delete or anonymise it.
- Client/contract data: 5 years for tax purposes (SARS).
- App evidence (AlibiSafe): Per your settings; deleted on request unless required for active legal matter.
- Contact-form submissions: Up to 12 months.
8. Your Rights (POPIA / GDPR)
You may request:
- Access, correction, deletion, or portability of your data.
- Objection to processing.
- Withdrawal of consent (marketing).
- Lodge a complaint with the Information Regulator (inforegulator.org.za).
Contact the Information Officer at inforeg@purpleraygroup.co.za.
9. Security
We use encryption in transit (TLS) and at rest, access controls, and integrity hashing (SHA-256 per-frame for AlibiSafe). No method is 100% secure; we continually harden our systems.
10. Children
Services are for users 18+. We do not knowingly collect data from children without parental consent.
11. Changes
We may update this Policy; material changes are notified at least 14 days in advance via email or in-app notice.
12. Contact
Information Officer: Josias Tlou (Interim) · inforeg@purpleraygroup.co.za · 113 B Suurman, Hammanskraal, Gauteng, 0400, South Africa.