Who is responsible
SA Lead GEN is responsible for your personal information under POPIA (the responsible party is Asonya Marketing (Pty) Ltd, which trades as SA Lead GEN). Our Information Officer is Katlego Thipe, reachable at lehlohonoloasonya@gmail.com.
Our customers
- What we keep: your name, email address, company and phone number (if you give them); your password, stored only as a one-way hash; your plan and payment history; a record of the leads you reveal; and the stages, follow-up dates and notes you keep on them, which only you can see.
- Card details: you enter them on Paystack's secure page. We never see or store your card number.
- Why: to run your account, bill you, help you, keep the service secure and fair (for example, one free account per person), and keep the records the law requires.
- How long: for as long as you have an account. Payment records are kept for five years, as tax law requires.
Businesses in our lead database
- What we hold: business names, trades, addresses, suburbs and map positions, the phone numbers and email addresses businesses publish, their websites and social media pages, the name and job title of a contact person where a business names one on its own website or customers tell us who answered their call, whether customers found the number working, and facts about the business's website, such as whether it works and what it runs on.
- Where it comes from: public sources such as business listings and maps, including OpenStreetMap, and each business's own website (see where our data comes from). We record the page a contact person's name came from. Customers can tell us who answered their call and whether the number works; a name they give is shown to other customers only once customers agree on it.
- Why: so that businesses can contact other businesses about their products and services, which is a legitimate interest under POPIA.
- How it is protected: phone numbers and email addresses are shown only to signed-in customers who reveal them, and every reveal is recorded. Customers must follow POPIA when they make contact (see our terms).
- Businesses that manage their listing: we send a one-time code by SMS to the listed number, keep only a one-way hash of the code, and record what the business chooses (who to ask for, whether suppliers may phone it, the best time to call, what it wants to buy, or removal), with the date, the exact wording and the code that proved the number, as proof of its choice. A business can change its choice at any time at /claim.
- Opting out: a business can remove itself straight away with an SMS code, or anyone can ask us to remove a business. We check the request, then hide the business from every customer, erase its phone number, email address and contact person, and do not list that number or email again.
Sharing
We never sell our customers' information. We share information only with the service providers we need to run SA Lead GEN: our hosting provider (Cloudflare), our payment gateway (Paystack) and our SMS provider (SMSPortal), which delivers the codes businesses ask for. Some of them process information outside South Africa; we use them only where POPIA allows it.
Security
Information travels over encrypted connections, passwords are stored only as one-way hashes, and each account can see only its own leads, payments and credits.
Your rights
You may ask us what personal information we hold about you, and ask us to correct it, delete it or stop using it. Contact our Information Officer at lehlohonoloasonya@gmail.com. If you are not satisfied with our answer, you may complain to the Information Regulator at inforegulator.org.za.