Privacy Policy

This policy is a working draft and should be reviewed by a legal professional, and the bracketed details completed, before it is relied upon.

This Privacy Policy explains how Bommol (“Bommol”, “we”, “us”), operated by [Bommol legal entity name] (registration number [●]), of [address], collects, uses and protects personal information when you use our website and the Bommol platform (the “Service”). We are committed to processing personal information lawfully and transparently in accordance with the Protection of Personal Information Act, 2013 (“POPIA”).

1. Who this applies to

This policy covers visitors to our website, people who contact us or request a demo, and users of the Bommol platform. Where you use Bommol to process information about your own customers, employees or suppliers, you are the responsible party for that information and we act as an operator on your behalf (see section 7).

2. Information we collect

• Information you give us — your name, business name, email address, phone number and anything you include when you request a demo or contact us.
• Account information — details needed to set up and administer your Bommol account and users.
• Business data you process — accounting, payroll, sales, stock and related records you capture or import into the Service.
• Usage and technical data — log data, device and browser information, and IP address, collected to operate and secure the Service.
• Cookies — see section 10.

3. How we use information

• To provide, maintain and improve the Service;
• To respond to demo requests and enquiries;
• To administer accounts, billing and support;
• To secure the Service and prevent fraud or abuse;
• To comply with our legal obligations.

4. Legal basis for processing

We process personal information where it is necessary to perform a contract with you, where you have consented, where it is required to comply with the law, or where it is in our legitimate interests to operate and protect the Service, balanced against your rights.

5. Sharing your information

We do not sell personal information. We share it only with trusted service providers who help us run the Service (such as hosting, email and payment providers) under appropriate confidentiality and data-protection terms, and where required by law or to protect our rights.

6. Security

We maintain reasonable technical and organisational measures to protect personal information against loss, unauthorised access and misuse. No system is perfectly secure, but we work to protect your data and to notify you and the Information Regulator of a breach where the law requires it.

7. Data you process in Bommol (operator relationship)

When you use Bommol to process personal information of your own data subjects, you remain the responsible party. We process that information only on your documented instructions, to provide the Service, and we assist you in meeting your POPIA obligations, including in relation to data-subject requests and security.

8. Retention

We keep personal information only for as long as necessary for the purposes set out above, to comply with legal and accounting obligations, and to resolve disputes. Business records you keep in Bommol are retained for as long as your account is active or as you direct.

9. Your rights

Subject to POPIA, you may request access to the personal information we hold about you, ask us to correct or delete it, object to certain processing, or lodge a complaint. To exercise these rights, contact our Information Officer at hello@bommol.co.za. You may also complain to the Information Regulator of South Africa.

10. Cookies

Our website uses essential cookies to function and may use analytics cookies to understand usage. You can control cookies through your browser settings; disabling some cookies may affect how the site works.

11. International transfers

Where personal information is processed outside South Africa (for example by a hosting or email provider), we take steps to ensure it receives a comparable level of protection as required by POPIA.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the “last updated” date above.

13. Contact

Questions about this policy or your personal information can be sent to our Information Officer at hello@bommol.co.za.