Whyfriday Website Privacy Notice
Last Updated: 30 June 2021
We respect the privacy of every individual who visit our website, including those in South Africa.
This Privacy Notice explains how we use personal data received from our website and other sources set out below and informs you of your data protection rights when using our website in South Africa.
Who are we?
When we refer to ‘Whyfriday’ ‘we’ ‘our’ or ‘us’ in this Privacy Notice, we refer to: Whyfriday (pty) Ltd whose registered office is at: 49 Kristal Street, Nelspruit, Mpumalanga, South Africa, and whose registration number is: 2014/232083/07.
We also refer to our website: https://whyfriday.com
What information do we collect from the Whyfriday website?
Our website serves primarily as information portals to help you better understand our products and services.
We also offer several website functions that collect information from users, which you provide to us when you ask to be kept informed, to be added to lists, or when you buy goods or book or request our services.
This information includes personal information or data belonging to you, which list is not exhaustive, such as your name, address, contact details, (e.g., email, postal address, and phone/mobile number) and general information etc.
How do we collect information on the Whyfriday website?
The main ways we collect information from our websites include the following examples, (not comprehensive):
How do we use your personal data?
We use your personal data to manage and meet service and information requests, to understand our service offering usage and website use, and to make our products and services (including our web services) available to you and to ensure that all services provided to you are as effective as possible.
The main uses of your personal data and the legal grounds we rely on for these are:
Maintaining and supporting website use
Where you use an online service governed by our provided online Terms and Conditions (for example, purchases from the online stores, or entering prize draws and competitions), we and our permitted third parties will process data in several ways that support our website services.
This may include the following activities: identity confirmation, any fraud and authentication checks, service delivery, administration of prize draws, competitions, membership offers, surveys and other promotional activities, any applicable payment processes and collections activities, customer support and any ongoing service communications.
We may also seek to improve our services, using user experiences, like a customer satisfaction survey (or use third parties to send these on our behalf).
We will also let you know when you call us that our calls may be recorded to support audit and quality purposes.
Necessary for contract
Legitimate Interests in running effective website services and use of customer satisfaction surveys to support and improve our services.
Where personal data is required for entering a contract, we will identify to you where information is mandatory. The consequences of not providing this information may include being unable to proceed with the requested service.
Managing your requests
We will process data in managing your requests made on or via our websites (e.g., where you request a service offering, sign up to ‘keep me informed’ or add your details into any other website data form or data field).
We will also process data in providing and maintaining personalised website experiences.
Enhancing website experience
Where we pre-fill website data fields to enhance and streamline your online experience.
Research and development
We will process data for development, analytics, analysis, and reporting purposes, e.g., to monitor website usage, for industry benchmarks of website performance etc.
Marketing activities and research and analytics
Other marketing activities will happen assessed on the Legitimate Interests ground. e.g., where we tailor marketing communications or send targeted marketing messages via post, phone or social media and other third-party platforms; and in providing existing customers with information (via email or other channels) about similar products and services.
To improve the services, we offer via our website, we may ask you to participate in research from time to time. It is entirely up to you whether you choose to do so.
We will use profiling, including segmentation tools and carry out research and analytics activities to inform our marketing strategies, to create a better understanding of our customers and visitors; and use of our websites, to support our website advertising, and to better improve the website information, functionality, and the services we provide.
Where we collect your personal data with consent, you may withdraw your consent for us to use your information in any of these ways at any time. (This right does not affect the lawfulness of processing that was based on that consent before its withdrawal.)
To maintain, cleanse and update our records, administer, and maintain our websites, support your queries and any other internal operations and administrative purposes (for example, this will include troubleshooting, testing, supporting our audit requirements and in responding to any enquiries you may make, including any data protection rights you raise).
Network and information security
To maintain our network and information security for us to take steps to protect your information against loss or damage, theft, or unauthorised access, and to maintain appropriate server locations (for example, we may work with third parties to support appropriate use of cloud services).
Acquisitions and disposals
Any data processed as is necessary in the context of corporate acquisitions or disposals
Management of legal and regulatory requirements
To manage legal and regulatory requests and requirements, meet or defend legal rights or for the prevention/detection of crime, (including where required to assist law enforcement agencies such as the Police (or any other public authority or criminal investigation body, or for the safeguarding of national security).
In the event we communicate to you an urgent security or third-party services security notification.
Who do we share personal data with? We may share your personal data with:
Information about data transfers
We may share the personal data described in this Privacy Notice with suppliers located inside or outside the South Africa, where this is necessary for the purposes described above. Where this happens, we apply safeguards to add to the data protections that apply to those data transfers. This includes an assessment of Person wo we are sharing the data with, and their security controls, the adequacy of data privacy laws applicable in any third country where the recipient of the information or data resides or is located, the use of European Commission or other country approved model contract terms
How long do we hold personal data?
We will keep your personal data for as long as we need it to provide the products and services you have signed up to. We may also keep it to comply with our legal obligations, respond to queries and resolve any disputes, to meet our legitimate interests, including for our ongoing research and development initiatives, and to enforce our rights. The criteria we use to determine storage periods include
Your data protection rights
You have the following rights in connection with your personal data:
If you are not satisfied, you also have the right to complain to the Information Regulator at https://www.justice.gov.za/inforeg/
Links to other websites
Keeping your information secure
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Notice.
We require all our service providers to have appropriate measures in place to maintain the security of your information.
Where we have given you (or where you have chosen) a password that enables you to access any personalised area on our website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted over the internet; any transmission is at your own risk.
Your information will be kept in a secure environment protected by a combination of physical and technical measures such as encryption technologies or authentication systems to prevent any loss, misuse, alteration, disclosure, destruction, theft, or unauthorised access.
This Notice explains how we obtain, use and disclose your personal information, in accordance with the requirements of the Protection of Personal Information Act (“POPIA”).
At Whyfriday we are committed to protecting your privacy and to ensure that your personal information is collected and used properly, lawfully and transparently.
The information we collect
We collect and process your personal information to facilitate communication and to contact you for the purposes of marketing our activities and delivering our services.
Should you provide us with your personal information or decide to register as a user on the Website, we may require you to provide us with personal information which includes but is not limited to –
Should your personal information change, please inform us and provide us with updates to your personal information as soon as reasonably possible to enable us to update your personal information.
You may choose to provide additional personal information to us, in which event you agree to provide accurate and current information, and not to impersonate or misrepresent any person or entity or falsely state or otherwise misrepresent your affiliation with anyone or anything.
Website usage information may be collected using “cookies” which allows us to collect standard internet visitor usage information.
We will not, without your express consent
Use your personal information for any purpose other than as set out below:
We are entitled to use or disclose your personal information if such use or disclosure is required in order to comply with any applicable law, order of court or legal process served on us, or to protect and defend our rights or property.
We will ensure that all of our employees, third party service providers, divisions, affiliates and partners (including their employees and third party service providers) having access to your personal information are bound by appropriate and legally binding confidentiality and non-use obligations (save as permitted herein) in relation to your personal information.
We may also disclose your information
Where we have a duty or a right to disclose in terms of law or industry codes;
Where we believe it is necessary to protect our rights.
We are legally obliged to provide adequate protection for the personal information we hold and to stop unauthorized access and use of personal information. We will, on an on-going basis, continue to review our security controls and related processes to ensure that your personal information remains secure.
Our security policies and procedures cover
Access to information
You have the right to request a copy of the personal information we hold about you. To do this, simply contact us at the numbers/addresses as provided on our website or complete the contact form below and specify what information you require. We will need a copy of your ID document to confirm your identity before providing details of your personal information.
Please note that any such access request may be subject to a payment of a legally allowable fee.
Correction of your information
You have the right to ask us to update, correct or delete your personal information. We will require a copy of your ID document to confirm your identity before making changes to personal information we may hold about you. We would appreciate it if you would keep your personal information accurate.
Definition of personal information
According to the Act ‘‘personal information’’ means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person. Further to the POPI Act, Whyfriday also includes the following items as personal information:
How to contact us
If you have any queries about this notice; you need further information about our privacy practices; wish to withdraw consent; exercise preferences or access or correct your personal information, please contact us at the numbers/addresses listed on our website.