1. Introduction
TallyTick is the trading name of K2026356347 (South Africa) (Pty) Ltd, a South African software and AI company. We respect the privacy and personal information of our customers, users, website visitors, business partners, candidates, and other individuals whose personal information we process. This POPIA Policy explains our approach to compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) and our commitment to processing personal information responsibly, lawfully, and transparently. It should be read together with our Privacy Policy.
2. Our commitment
TallyTick is committed to handling personal information lawfully and fairly, transparently, for defined purposes, proportionately, securely, accurately, and with respect for data-subject rights. Our approach is based on POPIA's eight conditions for lawful processing: accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards, and data-subject participation.
3. Responsible party
For purposes of POPIA, TallyTick may act as a responsible party when we determine the purpose and means of processing personal information. Legal entity: K2026356347 (South Africa) (Pty) Ltd. Trading as: TallyTick. Registration number: 2026/356347/07. Country: South Africa. Email: hello@tallytick.com. TallyTick is based at Observatory, 10 Browning Road, Cape Town, Western Cape, 7925, South Africa. Visits are by arrangement.
4. Personal information
Depending on how you interact with TallyTick, personal information may include your name, email address, telephone number, company or organisation details, account and login information, transaction and billing information, communications, support requests, technical and device information, browser information, IP address, website usage information, information submitted through our products or services, and other information you voluntarily provide. We do not seek to collect information unnecessary for the relevant purpose.
5. Processing limitation
We collect and process personal information only where there is a lawful and appropriate reason. Depending on the circumstances, processing may be based on your consent, the performance or preparation of a contract, compliance with a legal obligation, legitimate interests where permitted, or another lawful basis recognised by POPIA. We aim to collect information directly from the individual wherever reasonably practicable and avoid excessive, irrelevant, or unnecessary collection.
6. Purpose specification
We collect information for specific, explicitly defined, and legitimate purposes, including providing and operating products and services, managing accounts, communicating with customers and users, responding to enquiries and support requests, processing payments, maintaining security, preventing fraud and abuse, improving services, understanding usage, sending permitted communications, meeting legal obligations, protecting rights, and developing software and AI-enabled functionality.
7. Further processing
Where information is processed for a purpose other than the original purpose, we consider compatibility with the original purpose and whether the further processing is permitted by law. We consider the relationship between purposes, the nature of the information, the collection context, potential consequences, and appropriate safeguards.
8. Information quality
We take reasonable steps to ensure information in our possession is accurate, complete, not misleading, and updated where reasonably necessary. If you believe information we hold is incorrect or outdated, contact us to request correction or updating.
9. Openness and transparency
Our Privacy Policy explains what information we collect, why we collect it, how we use and protect it, when it may be shared, service providers, international processing, cookies and analytics, AI-related processing, and your rights. We may update our policies as our products, services, technology, and legal obligations develop.
10. Security safeguards
We take reasonable technical and organisational measures to protect information against unauthorised access, loss, misuse, destruction, damage, disclosure, and alteration. Depending on the circumstances, safeguards may include access controls, authentication, secure infrastructure, encryption where appropriate, monitoring, backups, and contractual controls over service providers. No digital system can be guaranteed completely secure.
11. Service providers and third parties
We may use trusted providers for cloud infrastructure, databases, hosting, security, analytics, payments, communications, customer relationship management, email delivery, and AI or machine-learning services. Where appropriate, we seek to ensure providers process information in accordance with applicable requirements and only for authorised purposes. Specific providers are described in our Privacy Policy.
12. International transfers
Some technology and service providers may operate outside South Africa. Where information is transferred outside South Africa, TallyTick will take reasonable steps to ensure the transfer is handled in accordance with applicable POPIA requirements.
13. Special personal information
POPIA provides additional protection for information relating to religious or philosophical beliefs, race or ethnic origin, trade union membership, political persuasion, health or sex life, biometric information, and criminal behaviour in specified circumstances. TallyTick does not intentionally seek this information unless there is a legitimate and lawful reason. Where it is processed, we apply additional protections required by law.
14. Children’s information
We do not knowingly seek to collect or process children’s personal information except where permitted by law and where appropriate safeguards are in place. If you believe a child has provided information without appropriate authorisation, contact hello@tallytick.com.
15. Direct marketing
TallyTick may communicate about products, services, updates, or other information where permitted by law. We respect requirements relating to unsolicited electronic communications and direct marketing. Where required, we provide an opportunity to opt out. You may contact us if you no longer wish to receive marketing communications.
16. Data-subject rights
Subject to legal limitations, you may have the right to know whether we hold information about you, request access, request correction or updating, request deletion where legally applicable, object to certain processing, withdraw consent, object to direct marketing, request information about processing, and exercise other rights under POPIA. Requests should be sent to hello@tallytick.com. We may verify your identity before responding.
17. Automated decision-making and AI
TallyTick may develop or use automated technologies in products, services, internal operations, security, or other legitimate activities. Where automated decision-making or profiling is used, we consider applicable legal requirements, including POPIA requirements, and provide appropriate information and safeguards where required. Our Privacy Policy contains additional information about AI and automated processing.
18. Retention
We do not intend to retain information indefinitely. We retain it only as long as reasonably necessary for the purpose collected, unless a longer period is required or permitted by law. Retention may depend on the nature of the information, purpose, relationship, legal and regulatory requirements, contracts, disputes, security, and fraud prevention. When no longer required, we aim to securely delete, destroy, anonymise, or otherwise dispose of it.
19. Data breaches
If a security compromise involves personal information, we will assess the incident and take appropriate steps under applicable law. Where POPIA requires notification to affected data subjects or the Information Regulator, we will make the required notifications. We may investigate, contain, secure systems, assess harm, take corrective measures, and notify relevant parties.
20. Complaints
If you believe TallyTick has processed your information in a manner that does not comply with POPIA, contact us first at hello@tallytick.com so we can investigate. You may also have the right to complain to the Information Regulator of South Africa: enquiries@inforegulator.org.za, 010 023 5200.
21. Information Officer
TallyTick recognises the role of an Information Officer in relation to POPIA compliance. For privacy enquiries and requests, contact hello@tallytick.com. Where appropriate, we may provide additional Information Officer contact details through our website or official communications.
22. Prior authorisation
Certain processing may require prior authorisation under section 57 of POPIA, including some processing involving unique identifiers, criminal behaviour, credit reporting, or certain transfers of special personal information or children’s information to foreign countries without adequate protection. TallyTick will assess its activities and obtain authorisation where required.
23. Relationship with our Privacy Policy
This policy provides a high-level explanation of our POPIA approach. Our Privacy Policy provides more detailed information about categories collected, purposes, cookies, analytics, AI processing, third-party providers, international processing, retention, marketing, data-subject rights, and contact information. The specific privacy notice applicable to the relevant activity should be considered alongside this policy and applicable law.
24. Changes to this policy
TallyTick may update this policy to reflect changes to our business, products, technology, applicable law, Information Regulator guidance, or privacy practices. The latest version will be published on our website with an updated Last updated date.
25. Contact us
For questions about this POPIA Policy, our privacy practices, or your personal information, contact TallyTick, K2026356347 (South Africa) (Pty) Ltd, registration number 2026/356347/07, at hello@tallytick.com. Last updated: September 2026.
TallyTick