Taggable (Pty) Ltd t/a Nextag.co
Effective date: 16 June 2025
1. Introduction
Taggable (Pty) Ltd (“Taggable”, “we”, “us”, “our”) is a South-African private company that owns and operates the Nextag.co platform. Nextag.co lets registered users purchase and configure NFC tags to perform actions such as redirecting to a web page. We respect your privacy and process personal information in accordance with:
- The Protection of Personal Information Act 4 of 2013 (POPIA);
- The Electronic Communications and Transactions Act 25 of 2002 (ECTA);
- The Consumer Protection Act 68 of 2008 (CPA);
- Any other applicable South-African law.
2. Definitions
Personal Information includes, for example, your name, contact details, identification number, payment details, online identifiers and usage data. Processing refers to operations like collection, storage, transmission, modification, or deletion.
3. What Personal Information We Collect
| Category | Examples | Source |
|---|---|---|
| Account details | Name, email, mobile number, password hash | Provided by you |
| Transaction data | Order history, payment reference, VAT number | From you & payment gateway |
| Tag configuration data | UID, redirect URL, usage logs | Generated when using platform |
| Technical data | IP address, browser type, device ID | Collected automatically |
4. How and Why We Process Your Information
| Purpose | Legal Basis (POPIA) |
|---|---|
| Create and manage your account | Contractual necessity |
| Operate and secure our platform | Legitimate interest; Legal obligation |
| Deliver purchased products | Contractual necessity |
| Send service-related notifications | Legal obligation |
| Marketing of similar products | Consent or opt-out |
| Analytics and improvements | Legitimate interest |
5. Disclosure to Third Parties
We may share your data with:
- Payment processors (e.g. PayFast);
- Logistics and courier services;
- Cloud-hosting and IT providers;
- Authorities, if legally required.
6. Cross-Border Transfers
If we store data outside South Africa, we ensure it is protected through adequate legal and technical safeguards including encryption and standard contractual clauses.
7. Security Safeguards
We use industry-standard technical and organisational security measures, including:
- TLS 1.3 encryption,
- Hashed passwords,
- Token-based API authentication,
- Access controls,
- Monitoring and intrusion detection.
8. Cookies & Similar Technologies
We use cookies to keep you logged in, remember preferences, and collect anonymous usage stats. You can control cookies in your browser settings.
9. Your Rights
You may request to:
- Access your data;
- Correct inaccuracies;
- Object to processing;
- Request deletion (right to be forgotten);
- Withdraw consent;
- Lodge a complaint with the Information Regulator.
10. Data Retention & Deletion
We retain your data only as long as required for legitimate business or legal purposes. You may request deletion of your account and all related data by emailing info@taggable.co.za. We will process the request within 30 days, subject to identity verification.
11. Direct Marketing
If you are an existing customer, we may contact you about similar products. You can opt out at any time. New users must opt in first.
12. Children
Our platform is not intended for persons under 18. If we become aware of data collected from minors without proper authorisation, we will delete it promptly.
13. Changes to This Policy
We may update this policy periodically. We will notify users through the website or email of any material changes.
14. Contact & Complaints
Information Officer
Taggable (Pty) Ltd
Email: info@taggable.co.za
Information Regulator (South Africa)
54 Maxwell Drive, Woodmead, Johannesburg, 2191
Phone: 010 023 5200
Email: POPIAComplaints@inforegulator.org.za
If you believe we have infringed your privacy rights, contact us first. If unresolved, you may lodge a complaint using Form 5 on the Information Regulator’s website.
Last reviewed: 16 June 2025