We collect as little personal information as we can, use it only for the reasons below, and keep it safe. This policy explains what we collect through this website and the rights you have under South African law.
1Who is responsible
rano is the responsible party for the personal information described in this policy. That means we decide why and how it is processed, and we are accountable for it under the Protection of Personal Information Act, 2013 (“POPIA”).
2Information Officer
Our Information Officer is responsible for making sure we comply with POPIA and for handling your requests.
- privacy@rano.co.za
3What this policy covers
This policy covers personal information we collect through this website: when you join the early-access list, send us a message, or simply browse.
Merchants who use rano to take payments, and the customers who pay them, are covered by a separate privacy notice that we provide during merchant onboarding. It explains the additional information we must collect by law, for example to verify a business under the Financial Intelligence Centre Act.
4Information we collect
Information you give us
- Early-access list: your email address, and the page you signed up from.
- Contact form: your name, email address, company name (optional), the topic you choose and your message.
- Emails to us: whatever you include in your email.
Information collected automatically
- Server logs: your IP address, browser type, the pages you request and the time of the request. Our hosting provider records these to run and protect the site.
- Cookies: the site doesn’t use advertising or analytics cookies. See our cookie policy.
We don’t ask for special personal information (such as health, religion or biometrics) through this site. Please don’t send it to us.
5Why we use it
| Purpose | Information | Lawful basis under POPIA |
|---|---|---|
| Telling you when rano opens, and inviting you to join | Email address | Your consent, given when you sign up |
| Replying to your message | Contact form details | Your consent, and steps you’ve asked us to take before a possible agreement |
| Running, securing and improving the site | Server logs | Our legitimate interest in a safe, working website |
| Meeting legal obligations | Any of the above, where required | Compliance with the law |
We only use your information for these purposes, or for a purpose that is compatible with them. We don’t sell it, and we don’t use it for automated decisions about you.
6Emails from us
If you join the early-access list, we will email you about your invitation and getting started with rano. Every email has a link to unsubscribe, or you can email privacy@rano.co.za. We won’t send unrelated marketing, and we won’t pass your address to anyone else to market to you.
8Information sent outside South Africa
Some of the providers above may store or process information outside South Africa. Where they do, we transfer it only as section 72 of POPIA allows: to countries or companies bound by laws, binding corporate rules or agreements that give it a level of protection substantially similar to POPIA, or with your consent. To ask which providers hold your information and where, email privacy@rano.co.za.
9How we protect it
We take reasonable technical and organisational measures to protect personal information against loss, misuse and unauthorised access, including encryption in transit, access limited to people who need it, and two-factor authentication on the accounts that hold it. If a breach affects your information, we will tell you and the Information Regulator as POPIA requires.
10How long we keep it
- Early-access list: until you unsubscribe, or 12 months after we invite you to open an account if you don’t, whichever comes first.
- Contact messages: 24 months after our last exchange, unless they lead to an agreement with you.
- Server logs: up to 90 days, unless needed to investigate a security incident.
11Your rights
Under POPIA you have the right to:
- ask whether we hold personal information about you, and for a copy of it;
- ask us to correct or delete information that is inaccurate, out of date, excessive or unlawfully obtained;
- object to us processing your information, and withdraw consent you’ve given;
- stop receiving direct marketing from us;
- complain to the Information Regulator.
To use these rights, email privacy@rano.co.za. We may need to confirm your identity first. Requests for records can also be made under our PAIA manual.
12Children
This site is meant for businesses and adults. We don’t knowingly collect personal information from anyone under 18.
13The Information Regulator
If you’re not happy with how we’ve handled your information, please contact us first so we can try to put it right. You can also complain to the Information Regulator (South Africa):
- Website
- inforegulator.org.za
- Complaints
- POPIAComplaints@inforegulator.org.za
- General enquiries
- enquiries@inforegulator.org.za
- Phone
- 010 023 5200
- Address
- Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
14Changes to this policy
We’ll update this policy when our practices change. The date at the top shows the latest version. If a change is significant, we’ll tell people on the early-access list by email.