Legal

Privacy & POPIA

Version 1.2, 20 October 2026

How Deidre and Co (Pty) Ltd handles personal information that reaches it through this website, its contact form and its e-mail address, and your rights, under South Africa’s Protection of Personal Information Act 4 of 2013 (POPIA). In plain words, and only what we do today.

1. Who we are

Deidre and Co (Pty) Ltd, registration number 2023/811635/07, registered office Regus Century City, The Colosseum, Foyer 3, 1st Floor, Century Way, Century City, Cape Town 7441, South Africa. In this notice “we” and “us” mean that company. For the information this notice covers, we are the responsible party.

2. Our Information Officer

Deidré de Waal, director, is the company’s Information Officer. Write to help@deidreco.com with “For the Information Officer” in the subject, or by post to the registered office.

3. What this notice covers

This website, deidreco.com, its contact form, and e-mails to help@deidreco.com.

Each of our apps has its own privacy notice, because each app handles more. If you use an app, its notice applies to that use:

4. What we collect, and why

Visiting this website. The website has no accounts, no cookies, and no tracking, analytics or advertising. Its typefaces and pictures come from this website itself, so no other company learns of your visit through them. To send you the pages, our host, Vercel, receives what every browser sends: your IP address, your browser, the page you ask for and the time. Vercel uses this to deliver the website and protect it. Basis: our legitimate interest in running a safe website (section 11(1)(f)).

Writing to us, through the contact form or by e-mail. We keep your name, e-mail address and message, to answer you and as a record of our correspondence. We use them only to reply. To stop the form being misused, the website briefly keeps the address your message came from (your IP address) in memory, to limit how many messages can be sent in a few minutes; it is not stored. Basis: our legitimate interest in answering you (section 11(1)(f)), and, where your message leads to an agreement, taking the steps you asked for (section 11(1)(b)).

5. Who we share it with

We never sell or rent personal information. We share it only with the services this website and our mailbox run on, each only for its part of the work, and with anyone a law requires us to give it to:

  • Vercel: hosts this website and runs its contact form.
  • Resend: carries messages from the contact form to our mailbox.
  • Apple (iCloud Mail): holds our mailbox, help@deidreco.com.

6. Information that leaves South Africa

Vercel, Resend and Apple are United States companies, and their records of the requests and e-mails they handle may be kept outside South Africa.

How we protect it (section 72 of POPIA): each service works under its own data-processing terms, which bind it to use the information only to provide its service to us and to keep it secure.

7. How long we keep it

Messages and e-mails: in our mailbox for as long as we need them to answer you, and as long as the law asks us to keep business records. Ask, and we delete yours when the law allows.

Vercel’s and Resend’s records of requests and e-mails: for the short time each keeps them to run and protect its service.

8. How we keep it safe

This website is sent only over an encrypted connection (HTTPS) and collects nothing beyond what section 4 says. If we have reason to believe someone got into personal information who should not have, we tell the Information Regulator and the people affected, as POPIA requires (section 22).

9. Your rights, and how to ask

Under POPIA you may:

  • ask whether we hold personal information about you, and for a copy of it (section 23; how, and any fee, is in our PAIA manual);
  • ask us to correct or delete information that is wrong, out of date, incomplete or misleading, or that we may no longer keep (section 24);
  • object to our processing it on the ground of our legitimate interest (section 11(3));
  • withdraw a consent you gave, from then on;
  • refuse direct marketing (section 69);
  • complain to the Information Regulator (section 12).

Ask the Information Officer (section 2), in your own words or on the Regulator’s forms (Form 1 to object, Form 2 to correct or delete, on inforegulator.org.za/popia). We check that you are who you say you are before we answer.

10. Direct marketing

Writing to us does not put you on a mailing list. We send marketing only to people who asked for it, and every such message says how to stop it.

11. Cookies

This website sets no cookies and uses no tracking or analytics.

12. Complaints

If you are unhappy with how we handle your information, tell the Information Officer first if you like. You may complain to the Information Regulator at any time, on its eServices portal: eservices.inforegulator.org.za.

Information Regulator, Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg 2191 · 010 023 5200 · enquiries@inforegulator.org.za

Versions

20 October 2026: version 1.

20 October 2026: version 1.1, the contact form (sections 3 to 7).

20 October 2026: version 1.2, the company’s e-mail address is now help@deidreco.com.

Questions: help@deidreco.com