Privacy Policy

Thuthu (Pty) Ltd · Registration Number: 2025/102758/07

23 Fielding Crescent, Mondeor Green, Johannesburg, Gauteng, 2091, South Africa

1. Introduction

Welcome to myPilotPost. This Privacy Policy explains how Thuthu (Pty) Ltd ("we," "us," "our," or "myPilotPost"), registered in South Africa, collects, uses, discloses, and protects your personal information.

This Privacy Policy complies with:

• The Protection of Personal Information Act, 2013 (POPIA) - South Africa
• The General Data Protection Regulation (GDPR) - European Union (for EU residents)
• Other applicable data protection laws and regulations

By using myPilotPost services, you agree to the collection and use of information in accordance with this policy.

2. Information Officer & Contact Details

Company Name: Thuthu (Pty) Ltd t/a myPilotPost

Registration Number: 2025/102758/07

Registered Address: 23 Fielding Crescent, Mondeor Green, Johannesburg, Gauteng, 2091, South Africa

Email: legal@mypilotpost.com

Information Officer: Littchel Nhlalo Mathuthu

3. Information We Collect

3.1 Personal Information

We may collect the following types of personal information:

• Name and surname
• Email address
• Phone number
• Postal and physical address
• Company name and details
• Job title and role
• Date of birth
• Identity or passport number (where legally required)
• Financial and payment information
• Social media account information (if you connect your accounts)
• Profile picture and other content you provide

3.2 Usage Information

We automatically collect information about how you use our services:

• IP address and device information
• Browser type and version
• Operating system
• Pages visited and time spent on our platform
• Referring/exit pages
• Clickstream data
• Cookies and similar tracking technologies
• Location data (with your permission)

4. How We Use Your Information

We use your personal information for the following purposes:

• To provide, maintain, and improve our services
• To process transactions and send related information
• To send you technical notices, updates, security alerts, and support messages
• To respond to your comments, questions, and customer service requests
• To communicate with you about products, services, offers, and events
• To monitor and analyze trends, usage, and activities
• To detect, prevent, and address technical issues and fraudulent activity
• To comply with legal obligations and protect our rights
• To personalize and improve your experience
• For any other purpose with your consent

5. Legal Basis for Processing (GDPR)

For EU residents, we process your personal data based on the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for a contract we have with you
• Legal obligation: Processing is necessary for us to comply with the law
• Legitimate interests: Processing is necessary for our legitimate interests

6. Information Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf
• Business Transfers: In connection with any merger, sale, or acquisition
• Legal Requirements: To comply with applicable laws and regulations
• Protection of Rights: To protect the rights, property, or safety of myPilotPost
• With Your Consent: With your explicit consent or at your direction

We do not sell your personal information to third parties.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Employee training on data protection
• Incident response and breach notification procedures
• Regular backups and disaster recovery plans

8. Your Privacy Rights

8.1 Rights Under POPIA (South African Users)

• Request access to your personal information
• Request correction of inaccurate information
• Object to the processing of your personal information
• Request deletion of your personal information
• Lodge a complaint with the Information Regulator

8.2 Rights Under GDPR (EU Users)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with your local supervisory authority

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies. Types of cookies we use:

• Essential Cookies: Necessary for operation of our service
• Preference Cookies: Remember your preferences
• Analytics Cookies: Help us understand usage
• Marketing Cookies: Used to deliver relevant advertisements

10. Complaints and Regulatory Authorities

South African Users: Information Regulator (South Africa)

Email: inforegulator@justice.gov.za · Website: www.justice.gov.za/inforeg

EU Users: Your local data protection supervisory authority