Privacy policy

1 .Definitions

1.1 Company means:

Olarm (Pty) Ltd, Registration No. 2015/057946/07, incorporated in the Republic of South Africa, principal office at 3rd Floor, 325 Main Road, Kenilworth, Cape Town, 7708, South Africa; and

Olarm UK Ltd, Olarm UK Ltd, Companies House No. 15792112, incorporated in the United Kingdom, registered office at 71–75 Shelton Street, London, WC2H 9JQ, United Kingdom; together (“Olarm”)

‍When we mention "Olarm", "we", "us" or "our" in this Privacy Policy, we are referring to the relevant Company entity responsible for Processing your data, depending on your location or the nature of the Services being provided.

1.2 Conditions for Lawful Processing: the lawful bases/conditions under POPIA or UK GDPR permit the processing of personal information/personal data.

1.3 Customer refers to any natural or juristic person (South Africa) / individual or organisation (UK) that receives Service(s) from the Company.

1.4 Channel refers to a platform made available to the Data Subject through which the Data Subject can interact with the Company.

1.5 Data Subject means the individual to whom the Personal Information/Personal Data relates, as defined under POPIA or UK GDPR.

1.6 Information Officer (South Africa) / Data Protection Officer (UK) means the person appointed to oversee compliance with applicable data protection laws.

1.7 Manual means this manual was prepared per section 51 of PAIA and regulation 4(1)(d) of the POPIA Regulations.

1.8 PAIA means the Promotion of Access to Information Act, 2000 (South Africa).

1.9 Personal Information / Personal Data means information about an identifiable individual, as defined under POPIA or UK GDPR.

1.10 Personnel refers to any person working for, or providing services to, the Company, including employees, directors, contractors, and consultants.

1.11 POPIA means the Protection of Personal Information Act, 2013 (South Africa).

1.12 UK GDPR means the UK General Data Protection Regulation and the Data Protection Act 2018.

1.13 Processing means any Personal Information/Personal Data operation, such as collection, storage, use, transfer, or disclosure.

1.14 Responsible Party (POPIA) / Controller (UK GDPR) means the entity determining the purpose and means of Processing.

1.15 Information Regulator means the South African Information Regulator or, in the UK, the Information Commissioner’s Office (ICO).

2. Introduction

This Privacy Policy is issued on behalf of Olarm. 

We are committed to protecting your privacy and ensuring that your Personal Information and Data are collected and used lawfully, fairly, and transparently. 

This policy explains how we collect, use, and safeguard your information when you access our website, mobile applications, or related Services (collectively, the “Services”). 

References to Data Protection Laws mean: 

• In South Africa: POPIA, PAIA, the Electronic Communications and Transactions Act, and related legislation.
• In the UK: UK GDPR and the Data Protection Act 2018

For consistency, terms defined under POPIA will be read alongside their UK GDPR equivalents (e.g., “Responsible Party/Controller”, “Personal Information/Personal Data”).

3. The purpose of this privacy policy

This policy explains:

• What Personal Information/Personal Data we collect.
• How and why we use it.
• When and with whom we may share it.
• Your rights under POPIA and UK GDPR.
• How we keep your data safe.

Questions or concerns about this policy should be directed to us using the details in Section 5.

4. Company details

South Africa:
Olarm (Pty) Ltd
3rd Floor, 325 Main Road, Kenilworth, Cape Town, 7708, South Africa
Tel: +27 21 009 0911

United Kingdom:
Olarm UK Ltd
71–75 Shelton Street, London, WC2H 9JQ, United Kingdom
Tel: +27 21 009 0911

5. Contact details of the information officer/DPO

South Africa:
Information Officer: Justin Zondagh
Email: legal@olarm.com
Address: 3rd Floor, 325 Main Road, Kenilworth, Cape Town, 7708, South Africa

United Kingdom (UK GDPR Data Protection Contact):
Data Protection Officer: Justin Zondagh
Email: legal@olarm.com
Address: Olarm UK Ltd, 71–75 Shelton Street, London, WC2H 9JQ, United Kingdom‍‍

6. Information that we may collect

• Information you provide directly (name, contact details, account information).
• Records of communication (emails, support requests, feedback).
• Usage information (device identifiers, IP addresses, browser type, login data, service usage).
• Payment and billing information.
• Voluntary survey or promotional information.
• Aggregated, anonymised data for analytics (not considered Personal Information).

We do not knowingly collect:

• Special categories of data (sensitive personal data).
• Data relating to criminal offences, unless required by law.
• Data from children under 13 (or 18 as per our Terms).
  

7. How your personal information is used

We process your Personal Information/Personal Data only when it is lawful to do so, including:

• To provide and manage our Services.
• To communicate with you.
• To fulfil contracts.
• To comply with legal obligations.
• To protect our systems and prevent fraud.
• To improve our Services.
• To market our Services (subject to opt-out rights).
  

8. Sharing of Personal Information

We may share your information:

• Within the Olarm group of companies.
• With service providers (e.g., IT, payment, cloud services).
• With business partners, where necessary, for Services.
• With regulators or authorities when legally required.
• In connection with business transfers (mergers, acquisitions).

We do not sell your Personal Information/Personal Data.

9. Your rights

You have the right to:

• Access your Personal Information/Personal Data.
• Request correction or deletion.
• Object to or restrict Processing.
• Withdraw consent where Processing is based on consent.
• Request portability of your data (UK GDPR).
• Complain to the relevant authority:
  
  • South Africa: Information Regulator (www.justice.gov.za/inforeg).
  • UK: Information Commissioner’s Office (www.ico.org.uk).
    

10. Security

We use technical, organisational, and administrative safeguards to protect your Personal Information/Personal Data against loss, misuse, and unauthorised access.

11. Access to personal information

• In South Africa, you may request access under POPIA and PAIA.
• In the UK, you may submit a Subject Access Request (SAR) under UK GDPR.
  

12. Data retention

We retain Personal Information/Data only for as long as necessary for the purposes collected or as required by law. When no longer required, data will be securely deleted or anonymised.

13. Changes to this policy

We may update this Privacy Policy from time to time. Updates will be posted on our website and, where appropriate, notified by email.