Last updated: May 2026
Who we are
Vaultbook (Pty) Ltd, registered in South Africa, operating from Johannesburg. We are the responsible party for the personal information described in this policy under the Protection of Personal Information Act, No. 4 of 2013 (POPIA).
What information we collect
Two kinds. First, information you give us directly — name, phone number, email address, company, the message in a contact form. Second, information collected automatically when you visit this website — IP address, browser type, pages visited, referrer, timestamps. We use lightweight analytics that do not identify individuals.
Why we collect it
- To reply to enquiries and quote on campaigns.
- To operate mobile campaigns we run for client brands. Where you enter a competition or campaign run by Vaultbook on behalf of a brand, the brand is the responsible party and we are the operator. Their privacy notice applies to that campaign data alongside ours.
- To meet our legal and regulatory obligations, including under the Consumer Protection Act and the WASPA Code of Conduct.
- To improve this website and our services.
Who we share it with
Only where necessary. Network operators (MTN, Vodacom, Cell C, Telkom Mobile) for the technical delivery of campaigns. Meta (for WhatsApp Business message delivery). Sub-processors who help us host, store and analyse data, subject to written agreements that bind them to the same standards. Law enforcement or regulators where compelled by law. We do not sell personal information.
How long we keep it
Contact-form enquiries: up to three years from last contact unless you ask us to delete sooner. Competition entries: as long as required by the Consumer Protection Act audit retention rules (typically three years from the close of the competition), or per the contract with the brand if longer. Aggregated, de-identified data may be kept indefinitely.
Your rights under POPIA
- Access — ask us what we hold about you.
- Correction — ask us to fix anything that is wrong.
- Deletion — ask us to delete your personal information, subject to legal retention requirements.
- Objection — object to processing that you believe is unlawful or excessive.
- Complaint — lodge a complaint with the Information Regulator (South Africa) if you believe we have failed in our obligations.
How to exercise these rights
Email Sarah@vaultbook.co.za. We respond within one calendar month. For competition entries, we may need to coordinate with the brand the campaign ran for; this can extend the timeline by a few days.
Updates
We will update this page if we change how we handle personal information. The "last updated" date at the top reflects the most recent change.