Privacy Policy
Last updated: 21 May 2026
My Expense (PTY) Ltd ("MyExpense", "we", "us", or "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African legislation. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website at myexpense.co.za or use our services.
1. Information We Collect
We collect personal information that you voluntarily provide to us. When you join our waitlist or register for our service, we may collect the following:
- Full name - to identify and address you
- Email address - to communicate with you about our service, updates, and launch notifications
- Profession or occupation - to understand your needs and tailor our service accordingly
- Mobile phone number - to provide support and service-related communications
We only collect information that is necessary for, and directly related to, the purposes outlined in this policy. We will not collect personal information indiscriminately.
2. How We Use Your Information
In terms of POPIA, we process your personal information lawfully and for a specific, defined purpose. We use the information we collect to:
- Manage your waitlist registration and notify you when MyExpense launches
- Provide, maintain, and improve our services
- Send you service-related communications, including updates and security alerts
- Respond to your enquiries and provide customer support
- Understand how our users interact with our website to improve user experience
- Comply with legal obligations under South African law, including SARS requirements where applicable
We will not use your personal information for direct marketing purposes without your explicit, prior consent. You may withdraw your consent at any time.
3. Data Storage and Security
We take the security of your personal information seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS/SSL protocols
- Secure hosting infrastructure with industry-standard security practices
- Access controls limiting data access to authorised personnel only
- Regular review of our security procedures and technologies
While we take every reasonable precaution to protect your information, no method of electronic transmission or storage is entirely secure. We cannot guarantee absolute security but are committed to notifying you and the Information Regulator of any data breach in accordance with POPIA.
4. Cookies and Tracking
Our website may use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device. We may use:
- Essential cookies - required for the website to function correctly
- Analytics cookies - to help us understand how visitors interact with our website, enabling us to improve our content and user experience
You can control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of our website.
5. Third-Party Services
We use trusted third-party service providers to help us operate our website and deliver our services. These include:
- Netlify - for website hosting and form submissions. Netlify may process data on servers located outside of South Africa. We ensure appropriate safeguards are in place, in line with Section 72 of POPIA, for any cross-border transfer of personal information.
We do not sell, trade, or otherwise transfer your personal information to third parties for marketing purposes. Third-party service providers are contractually obligated to protect your data and may only use it for the purposes we specify.
6. Your Rights Under POPIA
As a data subject under the Protection of Personal Information Act, you have the following rights:
- Right of access - You may request confirmation of whether we hold personal information about you and request access to that information.
- Right to correction - You may request that we correct or update any inaccurate, incomplete, or misleading personal information.
- Right to deletion - You may request that we delete your personal information where it is no longer necessary for the purpose it was collected, subject to any legal retention requirements.
- Right to object - You may object to the processing of your personal information on reasonable grounds, unless legislation provides for such processing.
- Right to withdraw consent - Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
- Right to lodge a complaint - You have the right to lodge a complaint with the Information Regulator (South Africa) if you believe your personal information has been unlawfully processed.
To exercise any of these rights, please contact us using the details provided in Section 9 below. We will respond to your request within a reasonable time and no later than 30 days, as required by POPIA.
Information Regulator (South Africa)
If you are not satisfied with how we handle your request, you may lodge a complaint with the Information Regulator:
- Website: inforegulator.org.za
- Email: enquiries@inforegulator.org.za
7. Data Retention
We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically:
- Waitlist data - retained until you are onboarded to our service or until you request deletion, whichever comes first.
- Account data - retained for the duration of your account and for a reasonable period thereafter to comply with legal, accounting, or reporting obligations.
- Marketing communications - retained until you unsubscribe or withdraw consent.
When personal information is no longer required, we will securely delete or de-identify it in accordance with POPIA.
8. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Notify registered users via email where the changes are significant
We encourage you to review this page periodically to stay informed about how we protect your information. Your continued use of our website and services after any changes constitutes acceptance of the updated policy.
9. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights under POPIA, or have concerns about how we handle your personal information, please contact us:
- Company: My Expense (PTY) Ltd
- Email: hello@myexpense.co.za
- Website: myexpense.co.za
- Location: Cape Town, South Africa