ComplianceTracker

Privacy Policy

Last updated: 11 October 2026

1. Who we are

Compliance Tracker is operated by Leadership by Design (Pty) Ltd (registered name LEADERSHIPBYDESIGN PTY LTD), a private company registered in South Africa, registration number 2021/685690/07, VAT number 4600307476. Registered office: 112 11th Avenue, Fairland, Johannesburg, 2030. Contact: hello@compliancetracker.co.za.

In this policy, “we”, “us” and “our” mean Leadership by Design (Pty) Ltd. We are the data controller for the personal data described in this policy, except where we say otherwise below.

2. Personal data we collect

  • Account data: name, email address, hashed password and authentication identifiers.
  • Practice data you enter: client company records, registration and tax reference details, contact names, email addresses and WhatsApp numbers of your clients’ contacts, deadlines and notes.
  • Reminder data: emails sent, recipients and delivery status.
  • Billing data: your plan and invoices. Card payments are handled by Paddle – we never see full card details.
  • Support data: messages and information you send us when asking for help.
  • Usage and telemetry: pages and features used, device, browser, IP address and approximate location.
  • Cookies: essential session cookies and limited analytics.

3. Why we process your data

  • To provide the Service – performance of our contract with you.
  • To send reminders on your instruction – performance of our contract and your instruction.
  • For security and fraud prevention – our legitimate interests.
  • To improve the product – our legitimate interests.
  • To provide support – performance of our contract and our legitimate interests.
  • To comply with the law – legal obligation.
  • For marketing – only with your opt-in consent.

For client-company contact details you upload, your practice is the responsible party and we process them as your operator, on your instructions.

4. Who we share data with

  • Service providers and subprocessors – hosting, database, email delivery (for example Resend), analytics and support tooling – under written data-protection terms.
  • Paddle.com Market Ltd – our Merchant of Record, which handles checkout, payments, subscription billing, tax compliance, invoicing, refunds and chargebacks, acting as an independent controller for payment data.
  • Professional advisers such as lawyers and accountants, where necessary.
  • Authorities, where required by law.

5. International transfers

Our service providers may process data outside South Africa. Where they do, we rely on appropriate safeguards, such as contractual protections, so that your data receives an adequate level of protection.

6. Data retention

We keep personal data for as long as your account is active and as needed to provide the Service. After your account is closed we delete or anonymise it within a reasonable period, unless we must keep it longer to meet legal, tax or accounting obligations.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email hello@compliancetracker.co.za.

8. Security

We use technical and organisational measures to protect personal data, including encryption in transit, access controls and separation of each practice’s data. No system is completely secure, but we work to protect your information.

9. Cookies

We use essential cookies and similar storage to keep you signed in and the Service working, and limited analytics to understand how it is used.

10. Contact

Questions about this policy or your data: email hello@compliancetracker.co.za.

11. South Africa: Protection of Personal Information Act (POPIA)

The Protection of Personal Information Act 4 of 2013 (POPIA) applies to our processing of personal information. Leadership by Design (Pty) Ltd is the responsible party for personal information processed through Compliance Tracker, and an operator for client-contact data uploaded by practices.

  • What we collect and why: the categories and purposes described in sections 2 and 3 above.
  • Lawful basis: we process personal information where it is necessary to carry out our contract with you, to comply with a legal obligation, to pursue our legitimate interests, or with your consent.
  • Your rights: you may request access to your personal information; ask us to correct or delete it; object to its processing; and object to direct marketing at any time, including by unsubscribing.
  • Retention: we keep personal information only for as long as necessary for the purposes above or as required by law.
  • Security safeguards: we maintain appropriate, reasonable technical and organisational measures. If your personal information is compromised, we will notify you and the Information Regulator as POPIA requires.
  • Cross-border transfers: where personal information is transferred outside South Africa, we do so in line with section 72 of POPIA.
  • Complaints: contact details for the Information Regulator (South Africa) – website inforeg.org.za, email complaints.IR@inforegulator.org.za. Your right to lodge a complaint is set out in section 12.
  • Privacy requests: email hello@compliancetracker.co.za. We may need to verify your identity before acting on a request.

12. POPIA Information Officer

In terms of the Protection of Personal Information Act, 2013 (POPIA), our designated Information Officer is Kevin Britz. For any request about your personal information (access, correction, deletion or objection) or any privacy complaint, email privacy@compliancetracker.co.za. You also have the right to lodge a complaint with the Information Regulator (South Africa): inforeg.org.za.