This notice explains how Chibase Consulting, which makes TrustLedger SRM ("we", "us"), handles personal information in line with the Protection of Personal Information Act, 2013 (POPIA). It covers this website and your account with TrustLedger.

Information we collect

Contact details you give us, such as your name, organisation, email address and phone number, when you start a trial, book a walkthrough or contact us.
Account and billing information for your subscription. Card payments are processed by Paystack; we do not store full card numbers.
Basic technical information, such as browser type and pages visited, to keep the site working and understand how it is used.

Records you keep in TrustLedger

Your organisation decides what stakeholder, engagement, grievance and commitment records to keep in its workspace. For that information, your organisation is the responsible party and we act as its operator, processing it only to provide the service. A data processing agreement is available on request.

How we use information

To provide, secure and support your TrustLedger workspace
To respond to enquiries and arrange walkthroughs you ask for
To bill your subscription
To send service messages; we only send marketing if you agree, and you can opt out at any time

We do not sell personal information, and your content is not used to train external AI models.

Sharing

We share information only with service providers that help us run TrustLedger, such as hosting, email and payment providers, under appropriate safeguards. Some providers may process information outside South Africa; where they do, we take the steps POPIA requires. A current list of subprocessors is published in the app.

Keeping information

We keep personal information only as long as needed for the purposes above or as required by law. If a trial ends without an upgrade, workspace data is kept for 3 months and then deleted.

Your rights

You may ask to access, correct or delete your personal information, or object to how it is used. Email info@trustledgersrm.co.za. If you are not satisfied with our response, you may complain to the Information Regulator (South Africa) at inforegulator.org.za.

Contact

Chibase Consulting, Information Officer: info@trustledgersrm.co.za

Privacy notice