We collect almost nothing.

Who we are

Payment Service Providers is published by Lidema Studios (Pty) Ltd, registration number 2024/066681/07 (“Lidema”, “we”, “us” or “our”). Lidema is the responsible party for the personal information described here. Our business address is 61 Ballybunion Crescent, Sunningdale, Cape Town, 7441; postal address: 61 Ballybunion Crescent, Sunningdale, Cape Town, 7441. Our Information Officer is Martin Kruger. Contact hello@paymentserviceproviders.co.za or 076 882 6213.

What this notice covers

This notice covers browsing, theme and language choices, email and form correspondence, corrections, privacy or PAIA requests, and security/diagnostic processing. We do not provide payment processing through this site. Do not send card details, bank credentials, identity documents, payment-account access, children's information, health information or other special personal information.

Information you give us

Email correspondence contains the address, name, message, metadata and any information you choose to send. When the contact form is enabled, it collects a required name and message, a preselected topic, an optional email address and optional provider, figure and source URL for a correction. Without an email address we may be unable to reply directly. Privacy and PAIA requests may require limited information reasonably needed to verify identity.

Information collected automatically

Servers and hosting/security providers may process an IP address, request time, URL, browser/user-agent, response status and security/diagnostic information. When enabled, the form temporarily uses an IP address in memory for a ten-minute abuse-prevention window. Application-container output is limited to 10 MB per file, up to 3 rotated files per application container. The time represented varies with traffic. A documented incident or legal hold may require relevant records to be preserved separately for longer.

What is required, optional and where it comes from

Technical request and security information comes from your device, browser and network provider and is required to deliver and protect the site. If it cannot be processed, the requested page or form may not work. A direct email necessarily supplies its sender address, routing metadata and message. In the optional form, name and message are required to create a usable enquiry; email and correction details are optional. If you omit an email address, we ordinarily cannot reply. Rights requests may require proportionate identity information so that we do not disclose records to the wrong person.

Why and on what ground we process it

We receive, route, investigate and answer enquiries and corrections; maintain publication accuracy; operate and secure the site; answer privacy, PAIA and legal requests; comply with law; and establish, exercise or defend legal claims. Depending on the context, POPIA section 11 permits this because you initiated the interaction, consented, processing protects a legitimate interest, or law requires it. We do not sell correspondence or add it to a marketing list.

Recipients and countries

Authorised Lidema personnel receive correspondence as needed. Migadu-Mail GmbH, a Swiss company, hosts our mailbox data in France. Hetzner Online GmbH hosts the site and related technical logs in Germany. When the form is enabled,Resend transmits the complete form email and processes its content and metadata primarily in the United States, using subprocessors. We may also disclose relevant information to advisers, insurers, courts, law-enforcement bodies or regulators where lawful and necessary.

The form is currently disabled. Submissions received through the former form passed through Resend in the United States to Migadu's mailbox infrastructure in France and remain subject to the retention and rights described here.

Transfers outside South Africa

These services involve processing outside South Africa. We permit a transfer only on a basis allowed by POPIA section 72, such as a binding agreement that provides an adequate level of protection, a permitted contract-related necessity, or consent where appropriate. Processor and transfer safeguards are reviewed before the form can be enabled.

Cookies and browser storage

The site currently sets no cookies and runs no behavioural analytics. It stores only your theme (`psp-theme`) and language (`psp-lang`) choices in local storage on your device until you clear them. They are functional preferences, not cross-site advertising or profiling.

Retention

Ordinary contact and correction correspondence is deleted or irreversibly de-identified 12 months after the matter is resolved, unless law, your specific consent, or a documented need to establish, exercise or defend a legal claim permits longer. Temporary rate-limit entries expire after about ten minutes. Browser preferences remain until you clear them. Processor backup cycles may delay final erasure of inactive copies under their contracts.

Security and incidents

We use measures appropriate to the information and risks, including restricted access, transport encryption, provider controls, software maintenance, retention procedures and an incident process. No internet system can be guaranteed completely secure. If we reasonably believe an unauthorised person accessed or acquired personal information, we investigate and notify the Information Regulator and affected people as soon as reasonably possible where POPIA section 22 requires it.

If a message unexpectedly contains identity documents, payment credentials, children's information or special personal information that is unnecessary for the request, we restrict access, avoid copying it, and securely delete or redact it as soon as the matter allows unless law requires its preservation.

Your rights under POPIA and PAIA

Subject to law, you may ask whether we hold your information; request access, correction or deletion; object on a permitted ground; withdraw consent where it is the basis; and complain to the Information Regulator. The Regulator publishes the prescribed objection and correction/deletion forms on its POPIA page. You may use those forms or send a substantially similar written request tohello@paymentserviceproviders.co.za. We request only what is reasonably needed to verify identity and prevent unauthorised disclosure.

Information Regulator (South Africa): Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191; PO Box 31533, Braamfontein, Johannesburg, 2017; telephone 010 023 5200; toll-free 0800 017 160; enquiries@inforegulator.org.za; and POPIAComplaints@inforegulator.org.za for POPIA complaints. Verify current channels on the Regulator's contact page.

Other people and third-party sites

If you give us another person's information, you must be authorised to do so and should tell them about this notice where appropriate. Provider/source links lead to sites with their own privacy practices, which we do not control merely because we link to them.

Access to records

Our PAIA Manual describes the records we hold and how to request them.

Changes and contact

We publish a new effective date when processing, providers or law materially changes. Send privacy questions to hello@paymentserviceproviders.co.za.