Privacy Policy

Bodycorp360 (Pty) Ltd ("we", "us", "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and its Regulations.

This Privacy Policy explains how we collect, use, process, store, share, and protect personal information when you use our platform at www.bodycorp360.com (the "Platform").

By registering for or using the Platform, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

Responsible Party: Bodycorp360 (Pty) Ltd

Registration: 2026/269941/07 | Tax Number: 9919384199

Email: info@bodycorp360.com

Phone: +27 71 232 5994

Website: www.bodycorp360.com

We act as the Responsible Party in respect of personal information we collect directly from our customers (body corporate administrators, managing agents, and trustees). In cases where our customers upload or manage resident data via the Platform, they are the Responsible Party for that data, and Bodycorp360 acts as an Operator.

We collect the following categories of personal information:

• Account information: Full name, email address, phone number, company/complex name.
• Billing information: Subscription plan, payment reference numbers. We do not store card details — all payments are processed by Paystack.
• Platform usage data: Login timestamps, features used, IP addresses, browser/device information.
• Body corporate data you upload: Property owner names, unit numbers, levy amounts, maintenance requests, meeting minutes, financial records. This data belongs to your body corporate and you remain the Responsible Party for it.
• Resident data managed by administrators: Resident names, email addresses, unit numbers, visitor logs, amenity bookings.

We process personal information for the following lawful purposes:

• To provide, operate, and maintain the Bodycorp360 Platform and its features.
• To process subscription payments and manage billing.
• To send service-related communications (levy reminders, maintenance updates, meeting notifications).
• To provide customer support and respond to enquiries.
• To improve the Platform through usage analytics.
• To comply with legal obligations under South African law.
• To prevent fraud, abuse, and unauthorised access.

We will not process your personal information for any purpose other than those stated above without your prior consent.

We process personal information on one or more of the following grounds:

• Contract: Processing is necessary to perform our contractual obligations to you (providing the Platform).
• Legitimate interest: Improving the Platform, preventing fraud, and securing our systems.
• Legal obligation: Complying with applicable South African laws.
• Consent: Where you have given explicit consent (e.g., marketing emails).

Your data is stored on secure cloud infrastructure with:

• Encryption in transit (TLS/HTTPS) and at rest.
• Access controls limiting data access to authorised personnel only.
• Regular security assessments and monitoring.
• Automated backups to prevent data loss.

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Account data is retained for the duration of your subscription plus a maximum of 24 months after termination, unless you request earlier deletion.

We do not sell your personal information. We may share it with:

• Paystack: For payment processing. Subject to Paystack's Privacy Policy.
• Cloud infrastructure providers: Who host and secure the Platform data.
• Email service providers: To deliver transactional and notification emails on your behalf.
• Law enforcement or regulators: Where required by law or court order.

All third-party operators are required to implement appropriate security measures and are prohibited from using your data for their own purposes.

Some of our cloud infrastructure and service providers may process data outside South Africa. Where this occurs, we ensure that the recipient country provides an adequate level of protection, or that appropriate contractual safeguards are in place, in accordance with Section 72 of POPIA.

As a Data Subject, you have the following rights:

• Right to access: Request a copy of the personal information we hold about you.
• Right to correction: Request that inaccurate information be corrected.
• Right to deletion: Request deletion of your personal information (subject to legal retention requirements).
• Right to object: Object to the processing of your personal information.
• Right to data portability: Receive your data in a commonly used, machine-readable format.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at info@bodycorp360.com. We will respond within 30 days.

We use session cookies and local storage to maintain your login session and application preferences. We do not use advertising or third-party tracking cookies.

You may disable cookies in your browser settings, but this may affect Platform functionality.

The Platform is not intended for use by persons under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or in-app notification. Continued use of the Platform after changes constitutes acceptance of the updated Policy.

If you believe we have not handled your personal information in accordance with POPIA, you may lodge a complaint with the Information Regulator of South Africa:

• Website: www.inforegulator.org.za
• Email: complaints.IR@justice.gov.za
• Phone: 012 406 4818

For any privacy-related queries, please contact our Information Officer:

Email: info@bodycorp360.com
Phone: +27 71 232 5994
Website: www.bodycorp360.com