Effective date: 13 November 2026

This privacy policy explains how Dinnative Technologies (Pty) Ltd collects, uses and protects personal information when you use dinnative.co.za (the “website”). We aim to follow the Protection of Personal Information Act 4 of 2013 (“POPIA”).

This policy covers the Dinnative corporate website only. Our products have their own privacy policies, which apply when you use them (see “Our products” below).

1. Who we are

The responsible party for your personal information on this website is:

  • Dinnative Technologies (Pty) Ltd
  • Registration number: 2017/280514/07
  • Address: 74 Montrose Avenue, Northgate, Randburg, 2162, South Africa
  • Phone: +27 82 346 2417
  • Email: [email protected]

Information Officer

Our Information Officer is Refilwe Lediga, Chief Executive Officer.
You can reach the Information Officer at [email protected].

2. What we collect and why

Contact form

When you send us an enquiry through the contact form, we collect:

  • your name (required)
  • your email address (required)
  • your phone number (optional)
  • your organisation (optional)
  • the area you are interested in (for example custom software, MemberSavi or CareSavi)
  • your message
  • a record that you ticked the consent box, with the date and time

We use this information to read your enquiry, reply to you, and discuss whether we can work together. Please do not put sensitive information, such as health or financial details, in your message.

Our lawful basis is your consent, which you give by ticking the box on the form. If you become a client, we may keep the information to take steps at your request before a contract and to perform that contract.

Spam protection

To limit spam and abuse of the form, we keep a hashed (scrambled) version of your IP address for a short time to count how many enquiries come from one connection. We do not store your raw IP address for this purpose. Our lawful basis is our legitimate interest in keeping the website secure and usable.

This record expires automatically, within about an hour.

Technical data processed by Cloudflare

Our website runs behind Cloudflare, a content delivery and security service. When you visit, Cloudflare processes your IP address and basic request details (such as browser type and the page requested) to deliver the site and protect it from attacks. Our lawful basis is our legitimate interest in keeping the website available and secure.

Server logs

Our web server may keep standard technical logs (such as IP address, date and time, and page requested) for security and troubleshooting.

What we do not do

  • We do not use analytics or advertising tools.
  • We do not use tracking cookies.
  • We do not embed maps, videos or social media widgets that load content from other companies.
  • We do not sell your personal information.
  • We do not use your enquiry to send marketing to you unless you ask us to.

The website may link to our LinkedIn and Facebook pages. If you follow those links, the social network’s own privacy policy applies.

3. Who we share your information with

We share personal information only with service providers who help us run the website and handle enquiries, and only as needed:

  • Hosting provider. The website runs on a server we manage using CloudPanel, and the database sits on a separate database server.
  • Cloudflare. Provides content delivery and security for the site (see above).
  • Email providers. Each enquiry is emailed to [email protected] and to a Gmail mailbox ([email protected]) operated by Google.
  • Staff. Only people at Dinnative who need to respond to enquiries or administer the website can see enquiries.

We may also disclose personal information if the law requires it, or to protect our legal rights. We do not give your information to third parties for their own marketing.

4. Transfers outside South Africa

Some of our service providers process information outside South Africa:

  • Google (Gmail) stores and processes email on servers that may be in other countries.
  • Cloudflare operates a global network, so your IP address may be processed in data centres outside South Africa.

Where your information is sent to another country, we rely on section 72 of POPIA. In practice this means that we send it only where the provider is bound by law, binding rules or an agreement that gives a similar level of protection, where you have consented, or where the transfer is needed to deal with your enquiry. By ticking the consent box on the contact form, you agree that your enquiry may be handled in this way.

5. How long we keep your information

  • Enquiries that do not become clients. We keep them for 24 months after the date of the enquiry and then delete them (from the website database and from our mailboxes).
  • Enquiries that become clients. We keep the information for as long as we have a business relationship with you, and afterwards for as long as the law requires us to keep business and tax records.
  • Spam-protection records. Expire automatically, within about an hour.
  • Cloudflare and server logs. Kept for the periods set by those systems.

You can ask us to delete your enquiry sooner (see “Your rights” below). We may keep information longer if the law requires it or if it is needed for a legal claim.

6. How we protect your information

We take reasonable steps to protect personal information from loss, damage and unauthorised access. These include:

  • the website is served over HTTPS (an encrypted connection)
  • Cloudflare provides security filtering in front of the site
  • the website’s administration area is limited to authorised administrators with their own logins
  • the contact form includes anti-spam checks
  • we store a hashed IP address rather than the raw address for rate limiting

No system is completely secure, and we cannot guarantee the security of information sent over the internet. If we become aware of a security compromise that affects your personal information, we will notify you and the Information Regulator as POPIA requires.

7. Your rights

Under POPIA you have the right to:

  • ask whether we hold personal information about you, and ask for a copy of it
  • ask us to correct or update information that is inaccurate or out of date
  • ask us to delete or destroy information that we no longer need or are no longer allowed to keep
  • object to the processing of your information on reasonable grounds, and withdraw your consent at any time (this does not affect processing done before you withdrew it)
  • complain to the Information Regulator

To use these rights, email our Information Officer at [email protected]. We may need to confirm who you are before we act on a request. We will respond within a reasonable time.

Complaints

If you are not satisfied with how we have handled your information, you can complain to the Information Regulator of South Africa:

We would appreciate the chance to resolve your concern first.

8. Cookies

This website uses only strictly necessary cookies:

  • Cloudflare security cookies. Cloudflare may set a security cookie, such as __cf_bm, to tell real visitors from bots. It does not track you across other websites.
  • WordPress login cookies. Set only when an administrator logs in. Ordinary visitors do not receive them.
  • Client demo access. If you enter the password for one of our private client demos, a cookie (dn_demo_auth) remembers this for 7 days so you don’t have to enter it again.

When you close our cookie notice, your browser remembers this in its local storage (dn_cookie_note). It stays on your device and is not sent to us.

We do not use analytics, advertising or tracking cookies, so we show a short notice instead of asking for consent. If that changes, we will ask for your consent first. Fonts are hosted on our own server, not loaded from a third party.

9. Our products

MemberSavi (membersavi.com) and CareSavi (caresavi.com) are separate products with their own privacy policies. This policy does not cover them. See the privacy policy on each product’s website.
The CareSavi privacy notice is at caresavi.com/privacy.

10. Children

This website is for businesses and professionals. It is not aimed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has sent us personal information, please contact us and we will delete it.

11. Access to records (PAIA)

You can also ask for access to records we hold under the Promotion of Access to Information Act 2 of 2000 (“PAIA”). Our PAIA manual explains what records we hold and how to request them.

12. Changes to this policy

We may update this policy from time to time. The effective date at the top shows when it was last changed. If we make a significant change, we will say so on this page.

13. Contact us

For questions about this policy or your personal information, contact:

  • Information Officer: Refilwe Lediga, [email protected]
  • General: [email protected]
  • Phone: +27 82 346 2417
  • Post: Dinnative Technologies (Pty) Ltd, 74 Montrose Avenue, Northgate, Randburg, 2162, South Africa