Privacy Policy
1. Who we are
This website is operated by ZYROMARK PTY, a South African company trading as ZyroRent. We are the responsible party (data controller) for any personal information collected through this site or in the course of providing our services.
2. What information we collect
We only collect the personal information we need to do business with you. That includes:
- Information you give us — your name, email address, phone number, business name, and the message you send us through our contact form, by email, or by WhatsApp.
- Account & billing information — for clients on a paid plan: business address, VAT number (if applicable), invoicing contact, and payment reference details. We do not store credit card numbers; payments are handled by external payment providers.
- Information collected automatically — when you visit our site we (and our analytics tools) record technical data such as your IP address, browser type, device type, pages viewed, and the date and time of your visit. See our Cookie Policy.
- Information you ask us to host — if we build a website for you, we may host customer enquiries, bookings, account registrations, or order data submitted on your site. In that case you are the responsible party for that data and we act as your operator.
3. Why we collect it
We process your personal information for the following lawful purposes:
- To respond to your enquiry and quote you for a website plan.
- To prepare a written agreement and to invoice you under that agreement.
- To design, build, host, secure and maintain your website.
- To send you service-related messages (e.g. invoices, downtime notifications, security alerts).
- To improve our website and services through aggregate analytics.
- To comply with our legal obligations (tax, financial reporting, fraud prevention).
We will not use your information for direct marketing without your separate, opt-in consent.
4. How long we keep it
We keep your information only for as long as we have a lawful reason to. As a guide:
- Contact-form enquiries that don't lead to a contract: up to 12 months.
- Active client records: for the lifetime of your plan plus 5 years (to meet financial-record retention requirements).
- Website backups: rolling 30-day window (unless we agree a longer period with you).
5. Who we share it with
We do not sell your personal information. We share it only with:
- Trusted suppliers who help us run our business — for example our hosting provider, our domain registrar, our email provider, and our payment processor. They may only use your information to perform the service we've asked them to perform.
- Authorities, if we are legally required to (e.g. SARS, the Information Regulator, a court order).
- A successor in business, if our business is sold or restructured. You'll be notified before that happens.
6. Where your information is stored
Our servers and key suppliers are located in South Africa, the European Union and the United States. Where information is sent outside South Africa, we make sure the recipient is bound by laws or contracts that provide protection comparable to POPIA.
7. How we keep it safe
We use reasonable technical and organisational measures to protect your information, including HTTPS/TLS, access controls, encrypted backups, web application firewall (WAF) protection, and least-privilege staff access. No system is 100% secure — if we ever experience a data breach that puts your information at risk, we'll notify you and the Information Regulator without delay, as POPIA requires.
8. Your rights under POPIA
You have the right, free of charge, to:
- Ask what personal information we hold about you.
- Ask us to correct or update inaccurate information.
- Ask us to delete information we no longer have a lawful reason to keep.
- Object to processing in certain circumstances, or withdraw consent you've given us.
- Lodge a complaint with the Information Regulator if you're unhappy with how we've handled your data.
To exercise any of these rights, email us at infozy@zyrorent.co.za. We'll respond within 30 days.
9. Children
Our services are aimed at businesses and adults. We do not knowingly collect personal information from anyone under 18. If you're a parent or guardian and you believe your child has given us their information, please email us so we can delete it.
10. Information Officer
The Director of ZYROMARK PTY acts as our Information Officer for POPIA purposes. You can reach the Information Officer at infozy@zyrorent.co.za.
11. The Information Regulator
The Information Regulator (South Africa) supervises compliance with POPIA. You can find them at inforegulator.org.za.
12. Changes to this policy
We may update this Privacy Policy from time to time. The version number and date at the top of this page show when it was last revised. If we make a change that affects you, we'll email you before it takes effect.