ChildCyberGuardThis policy explains how ChildCyberGuard ("ChildCyberGuard", "we") processes personal information under the Protection of Personal Information Act 4 of 2013 (POPIA). We are the responsible party for the information described below.
1. Who we are and who to contact
Responsible party: ChildCyberGuard, [registered address — to be completed].
Information Officer: [Information Officer — to be completed] — privacy@childcyberguard.com.
2. What we collect and why
| Information | Whose | Why we need it | How long we keep it |
|---|---|---|---|
| Name, email address, cellphone number, password (stored only as a one-way hash) | Parent / agent | To create and secure your account, contact you and help you if you forget your password | Until you delete your account |
| Device name, Windows version, last-seen time and IP address | Parent's device | To run the service, licence the device and detect abuse | Until the device or account is deleted |
| Websites (domain names) looked up on the protected PC and whether they were blocked | Child using the device | To show the parent a visit history and safety alerts, which is the purpose of the service | 90 days, then automatically deleted |
| Blocklist and settings you choose | Parent | To apply your rules | Until you delete them or your account |
| Payment records (amount, date, PayFast reference). We never see or store card numbers | Parent | To process payments, issue licences and meet accounting and tax duties | As required by law (up to 5 years) |
| Bank details for commission payouts | Agents | To pay commission you have earned | While you are an agent plus the period the law requires |
| Which agent referred you (referral code) | Parent | To credit the agent's commission | While your account exists |
| Consent record (date and policy version) | Parent | To prove you accepted this policy | While your account exists |
We do not record the content of web pages, messages, passwords, keystrokes, screenshots or files. We see website names only.
3. Children's information
POPIA treats children's personal information with extra care. ChildCyberGuard is sold to and controlled by parents and legal guardians. By registering you confirm you are the parent or legal guardian (or have the guardian's authority) and you consent, on the child's behalf, to the website-name monitoring described above, which exists solely to protect the child. We encourage you to explain this to your child honestly. We do not market to children, never sell children's information, and never use it for advertising or profiling.
4. Lawful basis
We process information (a) with your consent, (b) to perform our agreement with you, (c) to comply with legal obligations, and (d) for our legitimate interest in keeping the service secure and preventing fraud. You may withdraw consent at any time by deleting your account, although we then cannot provide the service.
5. Who we share information with
We never sell personal information. We share it only with operators that process it for us under written terms: our hosting provider; PayFast (payments); and, for filtering, DNS resolvers such as Cloudflare, which receive the website names a protected PC looks up in order to answer them. We may disclose information if a court order or law requires it, or to protect a child from serious harm.
6. Cross-border transfers
Some operators may store or process information outside South Africa. We only use operators that offer protection substantially similar to POPIA, or where you have consented or the transfer is necessary to deliver the service.
7. Security
We use industry-standard safeguards: encrypted connections (HTTPS), hashed passwords, access controls, protected program and data folders on the PC, and limited staff access. If personal information is compromised we will notify the Information Regulator and affected people as POPIA requires.
8. Your rights
- Access — download your information from My account → Privacy at any time.
- Correction — update your details by contacting us.
- Deletion — delete your account and all associated data from My account → Privacy.
- Objection / withdrawal of consent — contact our Information Officer.
- Complaint — you may complain to the Information Regulator (South Africa): inforegulator.org.za.
9. Cookies
We use a session cookie to keep you logged in and, if you arrived through an agent's link, a cookie that remembers the agent's referral code for 60 days. We do not use advertising or tracking cookies.
10. Changes
If we change this policy we will update the version number above and, for material changes, notify you.
This policy is a plain-language summary intended to comply with POPIA. It should be reviewed by a South African attorney before launch.