PRIVACY & DATA PROTECTION
Privacy Policy & POPIA
How Analiva collects, uses, protects and manages personal information and related data across the website and application environment.
PRIVACY FIRST
Built around responsible data handling.
This page is structured for South African privacy requirements, including POPIA. The final wording should be reviewed against Analiva's actual hosting, subprocessors, integrations, retention periods and security architecture before publication.
OUR PRIVACY PRINCIPLES
Clear rules for how information is handled.
The final policy should explain data practices in plain language and distinguish website information, account data and financial application data.
Lawful Use
Process personal information only for a defined and lawful business purpose.
Data Minimisation
Collect only the information reasonably required for the service.
Security
Use appropriate technical and organisational safeguards to protect information.
Transparency
Explain what is collected, why it is used and what rights users have.
Contents
- Scope of this policy
- Information we may collect
- How information may be used
- Lawful processing
- Cookies and website data
- Application and financial data
- Sharing and subprocessors
- International transfers
- Retention
- Security
- Your POPIA rights
- Contact and complaints
1. Scope of this policy
This policy should apply to the Analiva public website, customer account information and the Analiva application. The final version should identify the responsible party and effective date.
2. Information we may collect
Information may include business contact details, account registration information, billing details, support correspondence, technical usage information and data required to provide the Analiva service.
3. How information may be used
Information may be used to provide and improve the service, manage subscriptions, authenticate users, respond to support requests, communicate service updates and meet legal obligations.
4. Lawful processing
The final policy should state the appropriate lawful basis for each category of processing and ensure that processing is adequate, relevant and not excessive for the stated purpose.
5. Cookies and website data
The website may use necessary cookies and, where enabled, analytics or preference cookies. The Cookie Policy should provide the detailed categories, purposes and consent controls.
6. Application and financial data
Analiva may process financial and accounting information from connected systems to provide analytics and reporting. The final policy should clearly distinguish customer business data from personal information and explain how connected data is accessed, stored and protected.
7. Sharing and subprocessors
The final policy should list or describe the categories of service providers and subprocessors used for hosting, payments, email delivery, authentication, support or analytics, and explain the safeguards applied to those relationships.
8. International transfers
If personal information is processed outside South Africa, the final policy should explain the transfer mechanism and safeguards used to protect that information.
9. Retention
Personal information should be retained only for as long as required for the stated purpose, legal obligations, contractual requirements or legitimate operational needs. Final retention periods should match the actual system design.
10. Security
Analiva should maintain appropriate technical and organisational security measures, including secure access controls, encrypted connections, environment separation and controlled user permissions.
11. Your POPIA rights
Subject to applicable law, individuals may have rights to access, correct or request deletion of personal information, object to certain processing and lodge a complaint with the Information Regulator.
12. Contact and complaints
The final published policy should include Analiva's information officer or privacy contact details and the appropriate process for submitting privacy requests or complaints.
DATA BOUNDARIES
Website, billing and application data should remain clearly separated.
Analiva's privacy architecture should reflect the product architecture: the public website handles marketing and subscription workflows, while the SaaS application handles authenticated financial analytics.
- Website dataEnquiries, cookies, marketing interactions and public forms.
- Billing dataSubscription, invoice and payment-related information.
- Application dataConnected-company data, users, dashboards and analytics.
- Support dataTickets, messages, screenshots and troubleshooting information.
RELATED POLICIES
Privacy works together with the rest of the legal framework.
Cookie Policy
Details of website cookies, consent and tracking technologies.
Terms & Conditions
Rules governing use of the website, subscriptions and service access.
Subscription Terms
Billing, renewal, plan changes and recurring subscription conditions.
Have a privacy or data-protection question?
Contact Analiva for privacy requests, information-access questions or data-protection enquiries.