POPIA & GDPR Privacy Notice

We are committed to protecting your privacy and handling personal information responsibly in accordance with the Protection of Personal Information Act (POPIA) and the General Data Protection Regulation (GDPR).

1. Information We Collect

We may collect

Account details (name, email address, billing information)

Email metadata (sender, recipient, timestamps, delivery status)

Limited message data where technically required for delivery or troubleshooting

We do not sell personal information to third parties.

2. Purpose of Processing

Personal information is processed for

Providing and maintaining the service

Email delivery and troubleshooting

Billing and account management

Legal and compliance obligations

3. Data Retention

We apply data minimization principles

Operational logs and files are retained only for 60 days

Customer data is retained for legal, billing, and operational purposes

Data may be automatically deleted after defined retention periods ( 60 Days )

4. Lawful Basis for Processing

Processing is based on:

Contractual necessity

Legitimate business interests

Legal obligations

User consent, where required

5. Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, loss, or misuse.

6. Your Rights

Under POPIA and GDPR, you have the right to

Access your personal information

Request correction or deletion

Object to processing

Request data portability

Requests can be submitted via our contact details below.

7. International Data Transfers

Where data is processed outside your country, we ensure appropriate safeguards are in place to protect your information.

8. Contact Information

For privacy-related inquiries or requests

Email: privacy@echosend.co.za