Privacy Notice
Draft for legal review. Version 2026-10-29. Words in square brackets are placeholders.
This notice explains how [Legal name] (registration number [Registration number]), trading as Phoenix Online Studios, handles personal information in C-Base, in line with the Protection of Personal Information Act (POPIA).
Two roles
- For our clients' data (their customers, suppliers, employees and records) the client is the responsible party and we are its operator. The Operator Agreement sets out how we handle that data. Questions about it go to the client first.
- For C-Base accounts and registration (your name, email address, sign-in and security records) we are the responsible party, and this notice applies.
What we collect about users
- Name, email address and the organisation you belong to.
- Your password (stored only as a secure one-way hash) and, if you use it, your two-step sign-in secret (encrypted).
- Security records: when you sign in, your IP address and browser, and actions recorded in the audit log.
- Messages you send us through Help.
Why we use it
To give you access to C-Base, keep it secure, send you service emails (invitations, password resets) and answer your support requests. We do not sell personal information and do not use it for advertising.
Cookies
C-Base uses only the cookies it needs to work. See the Cookie Notice.
Who else sees it
Only the sub-operators listed in the Operator Agreement, and authorities where the law requires it.
How long we keep it
User accounts are kept while you have access and for [12] months after, so we can answer questions about past activity. Audit and security records are kept for [5] years. Then they are deleted.
Your rights
You may ask to see, correct or delete your personal information, object to how it is used, and complain to the Information Regulator (inforeg.org.za). Contact our Information Officer: [Information Officer name], [Information Officer email].