⚠ This is a draft placeholder. This POPIA Notice has not been reviewed by a POPIA compliance specialist and must be replaced with a professionally reviewed notice before this product is made available to users in South Africa.
Who We Are (Responsible Party)
Incendio Digital Labs is the responsible party for processing personal information in connection with SparkED.
What Personal Information We Process
- Name, surname, and professional title
- Email addresses and phone numbers
- Company information
- Profile photographs and logos (where provided)
- Usage analytics (IP addresses are hashed before storage)
- Subscription and billing information (selected plan, billing cycle, currency, and payment status — full card details are processed and stored only by our payment processor)
Purpose of Processing
We process personal information to:
- Create and manage your SparkED professional identity profile
- Generate vCards, QR codes, and wallet passes on your behalf
- Provide analytics on your profile engagement
- Process subscription payments and manage your billing plan
- Communicate with you regarding your account
Lawful Basis for Processing
Processing is carried out with your consent and is necessary to fulfil the service you have requested. Published profile information is processed on the basis of your explicit decision to publish it publicly. Billing information is processed as necessary to perform our contract with you (your subscription) and to comply with applicable tax and accounting obligations.
Operators & Third-Party Processors
We use the following third-party operators to process personal information on our behalf:
- Paystack — processes subscription payments and stores associated payment instrument details on our behalf. See Paystack's terms and privacy policy for how they handle your information.
- Hosting & database providers — store account, profile, and billing metadata securely.
- Email delivery provider — sends transactional emails such as verification codes, receipts, and account notices.
Your Rights Under POPIA
As a data subject, you have the right to:
- Be notified that your personal information is being processed
- Access your personal information
- Request correction of inaccurate personal information
- Request deletion of your personal information
- Object to the processing of your personal information
- Submit a complaint to the Information Regulator
Information Regulator
You have the right to lodge a complaint with the South African Information Regulator:
The Information Regulator (South Africa)
Website: inforegulator.org.za
Email: complaints.IR@justice.gov.za
Contact the Responsible Party
To exercise your POPIA rights or for privacy enquiries, contact us via our contact page.