Our privacy policy statement
Our privacy policy statement
PrimeThought Privacy Policy Statement Last Updated: 22 January 2026
1. Introduction
We value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your data when you interact with our website, applications, or services.
2. Information We Collect
We may collect the following types of information:
2.1 Personal Information
- Name, email address, phone number
- Professional or demographic information
- Any other details you voluntarily provide
2.2 Usage Data
- IP address, browser type, device metadata
- Pages visited and interaction logs
2.3 Cookies and Tracking Technologies
Used to enhance user experience, analyse behaviour, and improve service performance.
3. How We Use Your Information
We use your information for:
- Providing and improving our services
- Customer support and communications
- Analytics and service optimisation
- Security, fraud prevention, and regulatory compliance
4. Sharing Your Information
We do not sell personal information. We may share information only with:
- Authorised service providers
- Legal authorities when required
- Business partners (with explicit consent)
5. Data Security
We use industry-standard security measures to protect data from unauthorised access, loss, or misuse.
6. Your Rights
Depending on your jurisdiction, you may:
- Request access to your data
- Request corrections or deletions
- Object to specific processing activities
- Withdraw consent
- Request data portability
7. Data Retention
We retain personal data only as long as necessary to fulfil the purposes described here or as required by law.
8. Third-Party Links
External websites linked from our services are not covered by this Privacy Policy.
9. Changes to This Policy
We may update this policy periodically. Updated versions will be posted with a new “Last Updated” date.
10. Contact Us
For questions about this Privacy Policy: Email: privacy@primethought.biz
11. Compliance with POPIA (South Africa)
We process personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA). As the data subject, you are entitled to the following POPIA-specific rights:
11.1 Lawful Processing
Your personal information is processed lawfully and in a manner that does not infringe your privacy.
11.2 Purpose Specification
Data is collected for explicit, legally justifiable purposes and not used for unrelated reasons without your consent.
11.3 Information Quality
We take reasonable steps to ensure personal information is complete, accurate, and up to date.
11.4 Data Subject Participation
You may request access to your personal data and ask for corrections or deletions where applicable.
11.5 Security Safeguards
We implement appropriate technical and organisational measures to protect data from loss, damage, or unauthorised access.
11.6 Data Transfers Outside South Africa
If cross-border transfer is necessary, it will occur only if the receiving country has adequate data protection laws or if you provide explicit consent.
12. Compliance with GDPR (European Union & EEA)
If you are located in the EU/EEA, or if your personal data is processed by us under the GDPR, the following rights and obligations apply:
12.1 Legal Bases for Processing
We process data under the GDPR using one or more of the following legal bases:
- Consent
- Contractual necessity
- Legal obligation
- Legitimate interests
- Vital interests (rare, emergency situations)
12.2 Data Subject Rights Under GDPR
You have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Request erasure (“Right to be Forgotten”)
- Restrict processing
- Object to processing (including marketing)
- Data portability
- Withdraw consent at any time
12.3 Data Protection Officer (DPO)
If required, we may appoint a DPO. Contact details will be made available upon request.
12.4 International Data Transfers
When transferring data outside the EU/EEA, we use one or more of the following safeguards:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions
- Binding Corporate Rules (BCRs)
- Explicit user consent