Privacy Policy

1 Who We Are

Rush Buzz (Pty) Ltd ("Rush Buzz", "we", "us", "our") operates the website rushbuzz.co.za and the Rush Buzz business automation platform. We are a South African company.

Information Officer: Russell Nehrenreich
Email: russell@rushbuzz.co.za
Country: South Africa

2 Information We Collect

Information you provide to us

• Account information: name, email address, business name
• Client data: names, email addresses and contact details of your clients that you enter into the platform
• Payment information: payment details are processed directly by PayFast — we do not store your card number or banking credentials
• Communications: messages you send to our support team
• Email campaign content: content you create and send through our platform

Information collected automatically

• IP address and approximate location
• Browser type, version and operating system
• Pages visited, features used and time spent on the platform
• Referring URLs
• Cookie and session data

3 How We Use Your Information

We use your personal information to:

• Create and manage your Rush Buzz account
• Provide and operate the platform and its features
• Process payments and manage subscriptions via PayFast
• Send transactional emails (booking confirmations, receipts, password resets)
• Send marketing and newsletter communications where you have consented
• Respond to your support requests and enquiries
• Improve, develop and secure the platform
• Comply with legal obligations, including tax and financial record-keeping
• Detect, prevent and address fraud or security incidents

4 Lawful Basis for Processing

Under POPIA, we process your personal information on the following grounds:

• Performance of contract: processing necessary to provide the services you have subscribed to
• Consent: for marketing communications — you may withdraw consent at any time
• Legitimate interest: for platform security, fraud prevention and improving our services
• Legal obligation: where required by South African law, including tax and regulatory requirements

5 Data Storage & Security

Your data is stored on Supabase (PostgreSQL) infrastructure. We implement the following security measures:

• Encryption in transit using TLS/HTTPS on all connections
• Encryption at rest for stored data
• Row-level security ensuring your data is logically isolated from other users
• Access controls, authentication and role-based permissions
• Regular security reviews and vulnerability assessments

While we implement industry-standard security measures, no method of transmission or storage is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify you and the Information Regulator as required by POPIA.

6 Third-Party Service Providers

We share personal information with the following third-party processors, each bound by their own privacy policies and data processing agreements:

• Supabase, Inc. — database hosting and infrastructure (supabase.com/privacy)
• PayFast (Pty) Ltd — payment processing for South African transactions (payfast.co.za)
• EmailJS — transactional email delivery for lead capture forms (emailjs.com)

We do not sell your personal information to any third party.

7 Cross-Border Data Transfers

Supabase may store and process data on servers located outside South Africa. Where personal information is transferred internationally, we ensure that adequate protections are in place as required by section 72 of POPIA, including contractual safeguards with the receiving party.

8 Your Rights Under POPIA

As a data subject under POPIA, you have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: request that inaccurate or incomplete information be corrected
• Deletion: request the deletion of your personal information, subject to certain legal exceptions
• Objection: object to the processing of your personal information in certain circumstances
• Withdraw consent: withdraw consent for marketing communications at any time
• Complain: lodge a complaint with the Information Regulator of South Africa

9 Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. When you delete your account:

• Your personal profile and platform data is deleted within 30 days
• Billing records and transaction history are retained for 5 years as required by South African tax law (Income Tax Act and VAT Act)
• Anonymised or aggregated analytics data may be retained indefinitely

10 Cookies

We use cookies and similar technologies on our website. These fall into two categories:

• Essential cookies: required for the platform to function (session management, authentication). These cannot be disabled.
• Analytics cookies: help us understand how visitors use our website so we can improve it. These are anonymous and aggregate.

You can control cookie settings through your browser preferences. Disabling non-essential cookies will not affect your ability to use the Rush Buzz platform.

11 Marketing Communications

We may send you emails about Rush Buzz features, updates, tips and promotions where you have opted in or subscribed. You can unsubscribe at any time by:

• Clicking the "Unsubscribe" link in any marketing email
• Emailing us at info@rushbuzz.co.za with "Unsubscribe" in the subject line

Unsubscribing from marketing emails will not affect transactional emails related to your account or subscription.

12 Children's Privacy

Rush Buzz is intended for use by individuals who are 18 years of age or older. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us at privacy@rushbuzz.co.za and we will promptly delete it.

13 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Sending an email to your registered address at least 14 days before changes take effect
• Displaying a notice within the Rush Buzz platform

Your continued use of Rush Buzz after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

14 Contact Us

For any privacy-related questions, requests or concerns, please contact our Information Officer: