1. Who is responsible
Reach-X is the responsible party and data controller for personal information collected through this website and the Reach-X platform. Privacy and Information Officer requests can be sent to support@reach-x.co.za.
2. Information we collect
Depending on how you use Reach-X, we may collect:
- account and contact details, including name, email address and phone number;
- organization, campaign, fieldwork, response and reward information;
- photos, video, voice, survey answers, timestamps and location context when a campaign requires them;
- device, security and technical logs needed to operate and protect the service; and
- your email address and consent evidence when you ask to receive Reach-X news. This evidence includes the wording shown to you, time, source and a non-reversible keyed source identifier. We do not retain the raw source address in the newsletter ledger.
3. Why we use it
We use personal information to provide and secure accounts, run campaigns and fieldwork, review evidence, administer rewards, communicate service information, meet legal duties, respond to support requests and improve reliable operation. We send newsletter and promotional email only where you have consented or another lawful permission clearly applies.
4. Newsletter choices
Newsletter signup uses double opt-in: submitting the form does not subscribe you until you confirm through the email we send. Every marketing email provides an unsubscribe option. Withdrawing marketing consent does not stop essential security or account messages such as verification codes and password resets.
5. When information is shared
We share information only where necessary with organizations involved in the relevant campaign, authorized platform users, and service providers that support hosting, delivery, email and customer support. These include Railway for infrastructure, Brevo for email delivery and subscription management, and Zoho for business mailbox services. We do not sell personal information.
6. International processing
Some providers may process information outside South Africa or your country. Where this occurs, we use appropriate contractual and organizational safeguards and assess the protections required by applicable data protection law.
7. Retention and security
We keep information only for as long as needed for the purpose collected, our contractual and legal obligations, dispute handling and proof of consent. We use access controls, secure transport, restricted credentials and operational monitoring appropriate to the information and service. No internet service can promise absolute security.
8. Your rights
Subject to applicable law, you may ask to access, correct or delete personal information; object to or restrict certain processing; withdraw consent; or ask how your information was used. Contact support@reach-x.co.za. We may need to verify your identity before acting on a request.
9. Complaints and updates
Please contact us first so we can investigate. You may also complain to the South African Information Regulator through its official channels at inforegulator.org.za. We may update this notice as the platform and law develop; the date above shows the current version.