Privacy Notice
Last updated: [date to confirm] · Governed by the Protection of Personal Information Act, 2013 (POPIA)
This notice explains how IRP Business Solutions, a subdivision of iRunPayroll ("we", "us", "our"), collects, uses, stores and protects your personal information when you use this website or request a free AI audit. We are committed to handling your information lawfully, transparently and in line with POPIA.
Who is responsible for your information
IRP Business Solutions (a division of iRunPayroll) is the responsible party. Our Information Officer can be reached at privacy@irp-biz.co.za (confirm the correct address, postal address and registration details before launch).
What information we collect
When you submit the "Book a free AI audit" form, we collect only what we need to respond:
- Your name — so we can address you personally.
- Your work email address — the channel we use to follow up.
- Your company name — so we can scope the audit to your business.
- What you'd like AI to help with — so we can prepare a relevant response.
We also record limited technical and provenance information for security and record-keeping: the page the request came from, campaign/referral parameters, a timestamp, and — as part of our consent record — a one-way (hashed) form of your email address. We do not require your phone number to deliver the audit.
Why we use it, and our lawful basis
We use your information to:
- respond to and deliver your requested free AI audit and any follow-up you've asked for (our lawful basis is performing your request / consent); and
- where — and only where — you have separately and expressly opted in, send you occasional AI and POPIA insights and product updates (lawful basis: your consent).
The optional marketing opt-in is a separate, unticked choice. We record marketing consent only when you actively tick it, and we never treat a request for the audit as marketing consent.
Consent records
To honour POPIA, each submission is recorded in an append-only consent log capturing the version of the wording you agreed to, a server-set timestamp, the source of the request and the purpose. This lets us prove what you agreed to, and when.
Who we share it with
We use trusted service providers to operate our follow-up and CRM processes (for example, a customer-relationship management platform and workflow automation). These operators process your information on our behalf, under contract, and only as needed to help us respond to you. (Confirm the named processors and any cross-border transfer safeguards under POPIA s72 before launch.) We do not sell your personal information, and we do not contact people who have not asked us to.
How long we keep it
We keep your information only as long as necessary for the purpose it was collected, after which it is deleted or de-identified. (Confirm the specific retention period before launch — required for POPIA s14.)
Your rights
Under POPIA you have the right to access the personal information we hold about you, to ask us to correct or delete it, to object to processing, and to withdraw your consent at any time. To exercise any of these rights, email privacy@irp-biz.co.za. You can withdraw marketing consent at any time via the unsubscribe link in any message we send, or on our unsubscribe page. Opting out is free and takes effect promptly.
Security
We apply appropriate technical and organisational measures to protect your information, including rate limiting and validation on our forms, restricted access to personal data, and keeping our systems and credentials secured.
Complaints
If you believe we have not handled your information properly, please contact us first so we can put it right. You also have the right to lodge a complaint with the Information Regulator (South Africa).
Changes to this notice
We may update this notice from time to time. The "last updated" date above reflects the current version.