Privacy

Version 2026-10-08

POPIA compliance in South Africa

Venitik supports businesses’ compliance with the Protection of Personal Information Act (POPIA) through staff access controls, customer data exports and a written operator agreement. Our processing commitments are set out in clause 6 of the terms.

Your business remains responsible for lawful collection, appropriate customer notices and responding to requests about the personal information it records. Configure staff access according to their duties and keep customer information accurate.

Two kinds of information

Yours. The name, email and phone number of the people who run and work in your store, and what your business does in Venitik. We are the responsible party for this.

Your shoppers'. Anything you record about your own customers — names, contact details, purchase history, loyalty balances. You are the responsible party; we are your operator and act on your instruction. See clause 6 of the terms.

What we do with your information

Run the service, take payment for it, and contact you about it. We do not sell it, and we do not use your business data to advertise.

Where it is kept

The current application server is hosted by AWS in Stockholm, Sweden. Encrypted off-site backups, when configured, are kept in the configured AWS storage region. Copies cached on a register remain on that device. Transfers of personal information outside South Africa must meet the requirements of POPIA section 72.

Who else sees it

Only the suppliers needed to run the service: our hosting provider, our payment provider for subscription fees, and — if you switch it on — the email provider you choose for receipts. Each is bound to the same duties. We disclose information otherwise only where the law compels us.

How long we keep it

While you use Venitik, and 90 days after you stop so that you can retrieve it. Then it is deleted. You can export everything at any time.

Your rights

You may ask what we hold about you, correct it, or ask for it to be deleted. Write to privacy@venitik.com. You may also complain to the Information Regulator of South Africa.

If something goes wrong

If personal information is accessed by someone who should not have it, we tell the affected business without undue delay, with what we know, so they can meet their own obligations.