Privacy Policy
Last Updated: July 2026
Daisy Business Solutions (Pty) Ltd ("Daisy," "we," "us," or "our") is committed to protecting your privacy and ensuring you have a positive experience on our website and in all our dealings. This Privacy Policy explains how we collect, use, disclose, and otherwise process your personal information in compliance with the Protection of Personal Information Act, 2013 (POPIA) and South African data protection principles.
1. What Personal Information We Collect
We collect personal information in several ways:
Website & Online Interactions
- Contact forms: Name, email address, phone number, company name, job title, inquiry details
- Quotation requests: Business contact information, service requirements, project details
- Newsletter subscriptions: Email address
- Website analytics: IP address, device type, browser type, pages visited, referral source (via Google Analytics and Google Tag Manager)
- Cookies: Device identifiers, browsing preferences, session data (see our Cookie Policy)
Direct Communications
- Email correspondence: We retain emails and message content you send to us
- Phone calls: We may record calls (with notice) for training and quality purposes
- Chat or support requests: Conversation history and context
Service Delivery
- Sales inquiries: Industry, business size, specific product/service interests, budget information
- Customer information: Billing address, delivery address, payment information, contract details
- Service delivery: Technical data needed to fulfil your request, device/location information
Third-Party Sources
- Business intelligence: Company information from publicly available sources
- Marketing partners: Lead information from legitimate B2B sources
2. Legal Basis for Processing (POPIA Grounds)
Under POPIA, we process your personal information based on:
- Consent: When you expressly agree (e.g., newsletter signup, quotation request)
- Contract: When necessary to perform services you've requested
- Legal obligation: To comply with tax, financial, and regulatory requirements
- Legitimate interest: To improve our services, prevent fraud, and conduct marketing research
- Public interest: Where processing is necessary to fulfil our mission
3. How We Use Your Personal Information
We use your personal information for:
Business & Service Delivery
- Processing quotation requests and sales inquiries
- Providing the services or products you've requested
- Sending transactional communications (order confirmations, invoices, updates)
- Customer support and complaint resolution
- Contract management and fulfilment
Marketing & Communication
- Sending promotional emails, newsletters, and product updates (with your consent)
- Conducting market research and surveys
- Personalising your experience on our website
- Measuring campaign effectiveness via Google Ads and analytics tools
Legal & Compliance
- Complying with legal and regulatory obligations
- Protecting against fraud, abuse, and unauthorized access
- Enforcing our terms of service and other agreements
- Resolving disputes and claims
Analytics & Improvement
- Analysing how visitors use our website to improve functionality and user experience
- Tracking conversion metrics and campaign ROI
- Improving our services, products, and customer interactions
4. Sharing & Disclosure of Your Information
We do not sell your personal information. However, we may share information with:
Service Providers
- Cloud hosting and infrastructure providers (AWS, etc.)
- Email service providers (for communications)
- Analytics tools (Google Analytics, Google Tag Manager)
- Payment processors (for secure transactions)
Partners & Subsidiaries
- Daisy subsidiaries and related companies for service delivery and support
- Strategic partners only when necessary to fulfil your request (with notice)
Legal Requirements
- Government agencies, law enforcement, and regulators when required by law
- Courts and legal proceedings when compelled by law
Business Transfers
- In the event of a merger, acquisition, or business reorganization, your information may be transferred as part of that transaction
5. Data Retention
We retain personal information only as long as necessary to fulfil the purposes outlined above:
- Quotation requests & inquiries: 1-2 years (for follow-up and business records)
- Customer data: For the duration of our relationship plus 7 years (legal and tax compliance)
- Website analytics data: 2-3 years (aggregated after 12 months)
- Email communications: 3-5 years
- Newsletter subscribers: Until you unsubscribe
You may request deletion of your data at any time, subject to legal retention requirements.
6. Data Security
We implement appropriate technical, administrative, and physical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction:
- Encryption: Sensitive data is encrypted in transit (HTTPS/TLS)
- Access controls: Only authorized employees access personal information on a need-to-know basis
- Cloud security: Third-party providers maintain industry-standard security standards
- Employee training: Staff are trained on data protection and confidentiality
However, no method of transmission over the internet is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.
7. International Data Transfers
Daisy primarily operates in South Africa. However, some of our service providers (e.g., Google, AWS) may process data internationally. By using our website or services, you consent to such transfers, which are protected by contractual safeguards (Data Processing Addenda) and applicable laws.
8. Your Rights Under POPIA
As a data subject in South Africa, you have the following rights:
1. Right of Access
You may request confirmation of whether we hold your personal information and obtain a copy of that information.
2. Right to Correct
You can request correction of inaccurate, incomplete, or outdated personal information.
3. Right to Delete (Right to Be Forgotten)
You may request deletion of your personal information, subject to legal retention obligations and ongoing business requirements.
4. Right to Object
You may object to processing of your information for marketing, direct communication, or automated decision-making.
5. Right to Data Portability
You may request that your information be provided in a structured, commonly used format that can be transferred to another organisation.
6. Right to Lodge a Complaint
If you believe your rights have been violated, you may lodge a complaint with the Information Regulator of South Africa (see Contact Information below).
9. Opting Out
Unsubscribe from Marketing Communications
All promotional emails include an "Unsubscribe" link. Click it to remove yourself from our mailing list immediately.
Cookie & Tracking Control
See our Cookie Policy for instructions on disabling cookies and tracking via your browser settings.
Do Not Track Signals
We do not currently respond to "Do Not Track" (DNT) browser signals, but you can control tracking through your browser settings.
10. Third-Party Links & Services
Our website may contain links to third-party websites and services (e.g., partners, integrations). This Privacy Policy does not apply to external websites. We encourage you to review their privacy policies before providing your information.
11. Children's Privacy
Our services are intended for business and professional use and are not directed to children under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will promptly delete it.
12. Policy Updates
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will post the revised policy here with an updated "Last Updated" date. Significant changes will be communicated via email or prominent website notice. Your continued use of our website constitutes acceptance of changes.
13. Contact Information
For privacy inquiries, data subject requests, or complaints, please contact us:
Daisy Business Solutions (Pty) Ltd
16 Peter Place, Bryanston, 2191, Johannesburg
Phone: 011 244 5000
Email: info@daisysolutions.co.za
Data Protection Officer: For formal data subject requests under POPIA, you can submit requests via our contact information above. We will acknowledge receipt and respond within 20 business days as required by law.
14. South African Regulatory Resources
For more information about your rights under POPIA, visit:
Information Regulator of South Africa: https://www.justice.gov.za/inforeg/
POPIA Guidance & FAQs: https://inforegulator.org.za/