Privacy Policy
Your privacy matters to us. We're committed to protecting your personal information and being transparent about how we collect, use, and safeguard your data.
Effective Date: March 15, 2025 | Last Updated: March 15, 2025
Information We Collect
Personal Information
When you create an account with ivenorastilo or use our budgeting services, we collect information that helps us provide personalized financial management tools. This includes your name, email address, phone number, and postal address for account setup and communication purposes.
For our monthly budgeting features, we may collect financial information such as income details, expense categories, and spending patterns. This information is essential for providing accurate budget recommendations and financial insights tailored to your situation.
Automatically Collected Data
Our website automatically collects certain information when you visit or use our services. This includes your IP address, browser type, device information, operating system, and browsing patterns within our platform.
- Cookie data and session information to maintain your login status
- Usage analytics to understand how you interact with our budgeting tools
- Performance data to improve our website's speed and functionality
- Security logs to protect against unauthorized access attempts
We never collect your actual bank account credentials or passwords. Our budgeting tools work with information you voluntarily provide or import through secure, read-only connections when available.
How We Use Your Information
Your personal information serves specific purposes related to providing and improving our monthly budgeting services. We use your data to create personalized budget recommendations, track your financial goals, and send you relevant updates about your account.
Purpose | Information Used | Legal Basis |
---|---|---|
Account Management | Name, email, phone number | Contract performance |
Budget Creation | Income, expenses, financial goals | Contract performance |
Service Improvements | Usage data, feedback | Legitimate interest |
Communication | Email, preferences | Consent |
We analyze aggregated, anonymized data to identify trends in budgeting behaviors and improve our algorithms. This helps us provide better recommendations for all users while maintaining individual privacy. Your specific financial details are never shared in this aggregated analysis.
Data Sharing and Disclosure
ivenorastilo operates on a principle of minimal data sharing. We don't sell your personal information to third parties, and we only share your data in specific, limited circumstances that directly benefit your use of our services.
Service Providers
We work with carefully selected service providers who help us deliver our budgeting platform. These include cloud hosting services, email delivery platforms, and analytics providers. All service providers are bound by strict confidentiality agreements and data protection standards.
Our payment processing partners handle transaction data when you subscribe to premium features. They never receive your complete financial profile, only the information necessary to process payments securely.
Legal Requirements
In certain circumstances, we may be required to disclose your information to comply with South African law, court orders, or regulatory requirements. This might include responding to lawful requests from law enforcement agencies or financial regulators.
We will always notify you of such requests unless legally prohibited from doing so, and we'll challenge any requests we believe are overly broad or inappropriate.
If ivenorastilo is ever acquired by another company or merged with another business, your information would be transferred as part of that transaction. We would notify all users in advance and ensure the new entity maintains the same privacy standards.
Your Privacy Rights
Under South African data protection laws, including the Protection of Personal Information Act (POPIA), you have several important rights regarding your personal information. We've designed our systems to make exercising these rights straightforward and efficient.
Access and Correction
You can access most of your personal information directly through your ivenorastilo account dashboard. This includes your profile information, budget data, and communication preferences. If you notice any inaccuracies, you can correct most information yourself or contact us for assistance.
For information not visible in your dashboard, you can request a complete copy of your personal data. We'll provide this in a commonly used, machine-readable format within 30 days of your request.
Deletion and Restriction
You can delete your ivenorastilo account at any time through your account settings. When you delete your account, we remove your personal information from our active systems within 30 days. Some information may be retained in backup systems for up to 90 days for security and recovery purposes.
- Request temporary restriction of data processing
- Object to processing based on legitimate interests
- Withdraw consent for marketing communications
- Request data portability to another service provider
How to Exercise Your Rights
To exercise any of these rights, contact us at info@ivenorastilo.org with your request. Include your account email address and specify which right you want to exercise. We'll verify your identity and respond within the timeframes required by law.
Data Security and Protection
Protecting your financial information is our highest priority. We employ multiple layers of security measures, both technical and administrative, to safeguard your personal data against unauthorized access, alteration, disclosure, or destruction.
Technical Safeguards
All data transmission between your device and our servers uses industry-standard TLS encryption. Your personal information is stored on secure servers with restricted access, protected by firewalls and intrusion detection systems.
We regularly update our security protocols and conduct vulnerability assessments. Our development team follows secure coding practices, and we perform regular security audits of our systems and processes.
Access Controls
Employee access to personal information is strictly limited to those who need it to perform their job functions. All employees undergo background checks and sign confidentiality agreements. Access logs are monitored regularly for any unusual activity.
We use role-based access controls, ensuring that each team member can only access the minimum amount of data necessary for their responsibilities. Multi-factor authentication is required for all administrative access to our systems.
Despite our best efforts, no security system is 100% perfect. If we ever experience a data breach that affects your personal information, we'll notify you within 72 hours and provide clear information about what happened and what steps we're taking.
International Data Transfers
While ivenorastilo primarily operates within South Africa, some of our service providers may be located in other countries. When we transfer your personal information internationally, we ensure appropriate safeguards are in place to protect your privacy rights.
We only use service providers in countries with adequate data protection laws as recognized by South African authorities, or we implement additional contractual protections such as Standard Contractual Clauses approved by relevant data protection authorities.
Current International Services
- Cloud hosting services located in jurisdictions with adequate data protection
- Email delivery services operating under strict data protection agreements
- Analytics platforms that process only anonymized data
- Security monitoring services with limited data access
Retention and Deletion
We retain your personal information only for as long as necessary to provide our services and meet our legal obligations. Different types of information have different retention periods based on their purpose and legal requirements.
Data Type | Retention Period | Reason |
---|---|---|
Account Information | Duration of account + 7 years | Legal and tax requirements |
Budget Data | Duration of account + 3 years | Service provision and support |
Usage Analytics | 2 years from collection | Service improvement |
Marketing Data | Until consent withdrawn + 30 days | Communication preferences |
When retention periods expire, we securely delete or anonymize your information. Some aggregated, anonymized data may be retained indefinitely for research and service improvement purposes, but this data cannot be linked back to you individually.
Cookies and Tracking
ivenorastilo uses cookies and similar tracking technologies to enhance your experience on our platform. These small data files help us remember your preferences, keep you logged in, and understand how you use our budgeting tools.
Types of Cookies We Use
Essential cookies are necessary for our website to function properly. These include session cookies that keep you logged in and security cookies that protect against fraud. You cannot opt out of these cookies without affecting your ability to use ivenorastilo.
Performance and analytics cookies help us understand how users interact with our budgeting features. We use this information to identify popular features, discover usability issues, and improve our service quality. These cookies collect anonymized data and cannot identify you personally.
Preference cookies remember your choices about language, currency display, and other customization options. These cookies make your experience more convenient by maintaining your settings across sessions.
Managing Cookie Preferences
You can control cookie settings through your browser preferences or our cookie management tool available in your account settings. Disabling certain cookies may affect some functionality, but core budgeting features will remain available.
Changes to This Policy
We may update this privacy policy periodically to reflect changes in our practices, legal requirements, or service features. When we make significant changes, we'll notify you through your registered email address and display a notice on our website.
Minor updates, such as clarifications or formatting changes, may be made without individual notification. We encourage you to review this policy periodically to stay informed about how we protect your information.
By continuing to use ivenorastilo after policy updates take effect, you acknowledge and accept the changes. If you disagree with any updates, you can exercise your right to delete your account before the changes take effect.
Children's Privacy
ivenorastilo's budgeting services are designed for adults and are not intended for children under 18 years of age. We do not knowingly collect personal information from minors. If we discover that we have collected information from someone under 18, we will delete that information immediately.
Parents or guardians who believe their child has provided personal information to ivenorastilo should contact us immediately at info@ivenorastilo.org so we can remove the information from our systems.
Contact Our Privacy Team
For any questions about this privacy policy or how we handle your personal information, please contact us:
Email: info@ivenorastilo.org
Phone: +27 314 622 333
Address: 2 Grand Duc St, Eversdal, Cape Town, 7550, South Africa
We typically respond to privacy inquiries within 48 hours during business days.