Privacy Policy
K2026565982 (South Africa) (Pty) Ltd t/a TenderPing · Effective: 2026-07-16
1. Scope
This policy explains how K2026565982 (South Africa) (Pty) Ltd t/a TenderPing processes your personal information under the Protection of Personal Information Act (POPIA).
2. What we collect
Your email address; the keywords, exclusions, and province/category filters you set; your subscription status and tier; and, for paid plans, payment metadata held by our payment processor (we never see or store your full card details). We log basic technical data (e.g. IP for rate-limiting and security).
3. Why & lawful basis
We process this to deliver the alerts you asked for and to operate billing and support. Our lawful basis is primarily your consent, given at signup, and the performance of our contract with you. You can withdraw consent at any time by unsubscribing.
4. Tender & award data we publish
We publish South African government tender and award information from public records (primarily National Treasury eTenders). This includes the names of suppliers awarded public contracts, the award value, the buyer and the date — published for the legitimate purpose of public-procurement transparency and supplier discovery, on the basis of our legitimate interest (POPIA s11(1)(f)) together with the data's public-record status. We strip contact-person details, identity numbers and banking information, and we do not sell your personal information. If you are named in an award record and wish to object, see "Your rights" below — we operate a removal process.
5. Processors & cross-border transfer
We use service providers to operate the service (email delivery, payment processing, hosting, product analytics and backups), some of which process personal information outside South Africa (e.g. the EU or US). Where information is transferred across borders, we rely on the recipient being bound by data-protection terms that provide an adequate level of protection (POPIA s72(1)(a)), under each provider's data-processing agreement. Payment card data stays in South Africa with our payment processor and never reaches our servers. Our processors: Resend (email delivery, EU/US), PayFast (payment processing, South Africa), Fly.io (hosting, Johannesburg), PostHog (product analytics, EU), Cloudflare (encrypted backups & DNS).
6. Retention
We keep your information while your account is active and for a reasonable period afterwards as required for legal and accounting purposes, then delete or anonymise it.
7. Your rights
You may access, correct, or delete your information, object to processing, and lodge a complaint with the Information Regulator. Manage or permanently delete your data anytime via the "Manage your alerts" / "Delete my data" links in any email we send you, or email us.
8. Information Officer & contact
Information Officer: Luke Donovan Ramsay. Contact: hello@tenderping.co.za.