Privacy Policy

1. Who we are

Servana (Pty) Ltd is a South African innovation and research company. For the purposes of POPIA, Servana is the “responsible party” that determines why and how your personal information is processed.

Registered name: Servana (Pty) Ltd. Registration number: 2025/897026/07. Registered address: 95 Owl Road, Kikuyu Estate, Midrand, Gauteng, 2090. Our Information Officer is contactable at legal@servanaplatforms.com.

2. Scope of this policy

This policy applies to personal information we collect through our website (servanaplatforms.com), our forms, and our communications with you. Our products — such as Roo and Trustark — may have their own privacy terms that govern information processed within those products.

3. Information we collect

Information you give us:

• Contact details such as your name, email address, and company or institution, when you book a demo, subscribe to updates, or pitch an idea.
• The content of any message, idea, or request you send to us.

Information we collect automatically:

• Limited technical information — such as browser type, device, and pages visited — that is standard to the operation and security of a website.
• We do not currently use third-party advertising or cross-site tracking technologies.

4. Cookies

Our website uses only the cookies strictly necessary for it to function and stay secure. If we introduce optional analytics or other non-essential cookies in future, we will ask for your consent first. You can manage cookies through your browser settings.

5. Why we process your information, and our lawful basis

We process personal information for the purposes below, relying on one or more of the lawful grounds permitted by section 11 of POPIA — your consent, the performance of a contract or steps taken at your request, our legitimate interests, or compliance with a legal obligation:

• To respond to demo requests and enquiries, and to provide the products or services you ask for.
• To send you updates you have signed up for (you can opt out at any time).
• To consider ideas you choose to submit to us.
• To operate, secure, and improve our website and services.
• To comply with applicable law and to establish, exercise, or defend legal claims.

6. How we share your information

We do not sell your personal information. We may share it with:

• Trusted service providers (“operators” under POPIA) who process information on our behalf — for example our content, hosting, and email providers — under appropriate confidentiality and data-protection obligations.
• Authorities or other parties where required by law, regulation, or legal process, or to protect our rights, our users, or the public.
• A successor entity in connection with a merger, acquisition, or sale of assets, subject to this policy.

7. Cross-border transfers

Some of our service providers may store or process personal information outside South Africa. Where this happens, we take reasonable steps to ensure the recipient is subject to laws, binding rules, or agreements that provide an adequate level of protection, in line with section 72 of POPIA.

8. How we protect your information

We apply reasonable and appropriate technical and organisational measures to safeguard personal information against loss, unauthorised access, and misuse, as required by section 19 of POPIA. No method of transmission or storage is completely secure, but we work to protect your information and to address any incident promptly.

9. How long we keep your information

We keep personal information only for as long as necessary for the purposes set out in this policy, or as required or permitted by law, after which we delete or de-identify it.

10. Your rights

Subject to POPIA, you have the right to:

• Ask whether we hold personal information about you, and request access to it.
• Request that we correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or unlawfully obtained.
• Object, on reasonable grounds, to the processing of your personal information.
• Withdraw consent where we rely on it (this does not affect processing already carried out).
• Lodge a complaint with the Information Regulator.

To exercise any of these rights, contact us at legal@servanaplatforms.com. We may need to verify your identity first. Requests for access are handled in line with the Promotion of Access to Information Act, 2000 (PAIA), and our PAIA manual where applicable.

11. Children

Our website and services are not directed at children, and we do not knowingly collect the personal information of children without the consent of a competent person. If you believe we have done so, please contact us and we will take appropriate steps.

12. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, with the “last updated” date shown above. We will highlight material changes where appropriate.

13. Contact us and the Information Regulator

For any question about this policy or how we handle your personal information, contact our Information Officer at legal@servanaplatforms.com.

You also have the right to complain to the Information Regulator (South Africa): JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001. Enquiries: enquiries@inforegulator.org.za. POPIA complaints: POPIAComplaints@inforegulator.org.za. Website: https://inforegulator.org.za.