Privacy policy

Last updated 4 November 2026 · Draft for legal review

This policy explains what personal information Clearlist Compliance (Pty) Ltd collects, why, and what your rights are under the Protection of Personal Information Act, 2013 (POPIA). We wrote it in plain language. If anything is unclear, email us.

1. Who we are

Clearlist Compliance (Pty) Ltd, registration number 2026/882062/07, Johannesburg, South Africa ("Clearlist", "we", "us"). Our Information Officer is Bilal Cassim, Director. Contact: hello@clearlist.co.za.

2. Two different roles we play

As a "responsible party" for information about you as a visitor, prospective client or client contact person. This policy mainly covers that information.
As an "operator" for the contact lists our clients give us to cleanse. Our clients decide why that information is processed. We only process it on their written instructions, under a data processing agreement, and only to run their opt-out registry cleansing. We never market to, sell or share those contacts.

3. What we collect and why

Information	When we collect it	Why
Your email address	When you ask us to email your compliance score and guide	To send what you asked for, and a short series of follow-up emails about the opt-out rules. You can unsubscribe at any time.
Your free-check answers	Only if you choose to email yourself the results	To include them in your results email and suggest the right plan.
Name, business name, email, phone number, sector, chosen plan	When you sign up or contact us	To set up and deliver the service, invoice you and talk to you about your account.
Payment details	When you pay online	Payments are handled by our payment provider. We do not see or store your full card number.
Client contact lists	When a client sends them for cleansing	Only to check them against the NCC opt-out registry and block opted-out contacts in the client's tools (we act as operator).

We collect only what we need. Our free compliance check runs in your browser: your answers are not sent to us unless you ask us to email you the results.

4. Direct marketing from us

We only send you marketing emails if you asked for our guide or results, became a client, or agreed to hear from us. Every email has an unsubscribe link, and we honour opt-outs promptly. We check our own marketing lists against the NCC opt-out registry, because we follow the rules we sell.

5. Who we share information with

The National Consumer Commission: client contact lists are submitted to the NCC opt-out registry for cleansing, on our clients' instructions.
Service providers that help us run the business, such as our website host, website analytics provider, email provider, form provider and payment provider. They may only use the information to provide their service to us.
Authorities, where the law requires it.

We never sell personal information.

6. Information sent outside South Africa

Some of our service providers (for example email or hosting services) may store information on servers outside South Africa. We only use providers in countries with adequate data protection laws, or under agreements that protect your information as POPIA requires.

7. How we keep it safe

We use password-protected accounts with two-step login, encrypted connections, access limited to people who need it, and secure deletion of client lists once each month's cleansing records are filed. No system is perfect: if a breach affects you, we will tell you and the Information Regulator as POPIA requires.

8. How long we keep it

Leads who never become clients: until you unsubscribe, or 24 months after our last contact, whichever comes first.
Client records and invoices: for as long as tax and company laws require, usually 5 years.
Client contact lists: deleted after each cleansing is complete; we keep only the cleansing records (counts, dates and NCC receipts) clients need as proof.

9. Your rights

You may ask us to tell you what information we hold about you, correct or delete it, or stop using it for marketing. Email hello@clearlist.co.za. We will reply within 30 days. You can also object to processing or withdraw consent at any time.

If you are unhappy with how we handled your information, please tell us first. You also have the right to complain to the Information Regulator: inforegulator.org.za.

10. Cookies

Our website does not use advertising or tracking cookies. We use Cloudflare Web Analytics to count visits and see which pages are read. It sets no cookies and does not track individual visitors; it records things like the page viewed, the referring website, the country and the type of device.

11. Changes

We may update this policy. The date at the top shows the latest version.