Privacy Policy

Data Controller

The controller of personal data is:

(hereinafter referred to as the "Controller").

For any matters related to personal data protection, you can contact us at:
contact@todaidesign.net

Scope of processed data

The Controller may process the following personal data:

• email address,
• data provided via contact or registration forms,
• data required to provide services and billing,
• technical data such as IP address, browser and device information (for security and analytics purposes).

Purpose of data processing

Personal data is processed for the purpose of:

• providing services available on todaidesign.net,
• responding to inquiries and communicating with users,
• performing contracts and fulfilling legal and accounting obligations,
• improving functionality and ensuring the security of the service.

Legal basis for processing

Personal data is processed based on:

• Article 6(1)(b) GDPR – performance of a contract or pre-contractual actions,
• Article 6(1)(c) GDPR – compliance with legal obligations,
• Article 6(1)(f) GDPR – legitimate interest of the Controller (security, service development),
• Article 6(1)(a) GDPR – user consent, where applicable.

Data recipients

Data may be shared with trusted service providers supporting the Controller in:

• hosting,
• IT services,
• accounting,
• payment processing,

only to the extent necessary to provide the services.

Data retention period

Personal data is retained:

• for the duration of the agreement,
• after termination – as required by applicable law,
• until consent is withdrawn, where processing is based on consent.

User rights

Users have the right to:

• access their personal data,
• rectify data,
• erase data,
• restrict processing,
• data portability,
• object to processing,
• lodge a complaint with the supervisory authority.

Voluntary provision of data

Providing personal data is voluntary but necessary to use certain features of the service.

South Africa — POPIA

For users in the Republic of South Africa, Todae processes personal information as a responsible party under the Protection of Personal Information Act, 2013 (POPIA). The lawful bases listed above apply as the corresponding POPIA processing conditions (consent, contract performance, legitimate interest and legal obligation).

• You may object to the processing of your personal information for direct marketing at any time (POPIA s69) — every marketing email contains an unsubscribe link, or write to us.
• You may request access to, correction or deletion of your personal information using the contact address above; account deletion is also available in the app under Settings.
• If you believe we process your information unlawfully, you may lodge a complaint with the Information Regulator (South Africa) — inforeg.org.za, complaints.IR@inforegulator.org.za.