Privacy policy
Effective 2 August 2026
This policy explains how Phapano Directory (“Phapano”, “we”, “us”) collects, uses, discloses and protects personal information, in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).
1. Responsible party
Phapano – The Difference (company registration number 2024/374434/08, non-profit organisation number 316-599 NPO) is the responsible party for the personal information described in this policy. It operates the Phapano Directory. Enquiries and requests may be directed to info@phapano.com.
2. Information we collect
2.1 Visitors
We do not operate user accounts and do not require you to provide personal information to use this website. Our hosting provider automatically records standard technical information, including IP address, date and time of request, pages requested, referring URL and browser type, for the purposes of delivering the service, security and diagnostics.
Search terms entered on this website are processed to return results. We keep a record of what a search did — the number of words, the categories it matched, how many results were returned — but never the words themselves, so a search cannot be read back later.
Search terms do appear in the page address, which means they may also appear in ordinary web server request logs and in your own browser history. Phapano Directory search is designed to work without names or other identifying personal information.
2.2 Listed professionals
Where a professional applies to be listed, we collect the information they submit for that purpose, which may include their name, professional registration category and number, practice details, qualifications, areas of practice, languages, consultation arrangements, fees and the contact details they nominate for referrals.
3. Purpose of processing
We process personal information for the following purposes:
- To operate, maintain and secure this website.
- To publish professional listings and enable members of the public to find and contact professionals directly.
- To verify professional registration status against publicly available records.
- To respond to enquiries and to administer listings.
- To comply with legal obligations.
4. Lawful basis
Professional listing information is processed on the basis of the consent given by the professional at the time of application, and on the basis of our legitimate interest in operating a directory of registered professionals. Technical information about visitors is processed on the basis of our legitimate interest in operating and securing the service.
5. Disclosure
We do not sell personal information. We do not share personal information with third parties for marketing purposes. Personal information may be disclosed to service providers who host or support this website, and where disclosure is required by law, court order or a competent authority.
Listing information supplied by professionals is published on this website and is accessible to the public and to search engines.
6. Cross-border transfers
Our hosting and infrastructure providers may process information on servers located outside South Africa. Where this occurs, we take reasonable steps to ensure that the recipient is subject to laws, binding rules or agreements providing an adequate level of protection.
7. Retention
Listing information is retained for as long as the listing remains published and for a reasonable period afterwards for record-keeping purposes. Technical logs are retained by our hosting provider for a limited period. We delete or de-identify personal information when it is no longer required for the purpose for which it was collected, unless retention is required or permitted by law.
8. Security
We take appropriate, reasonable technical and organisational measures to prevent loss of, damage to, or unauthorised destruction of personal information, and unlawful access to or processing of personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Your rights
Subject to the conditions in POPIA, you have the right to:
- request confirmation of whether we hold personal information about you;
- request access to that information;
- request correction, deletion or destruction of information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully;
- object to the processing of your personal information;
- lodge a complaint with the Information Regulator.
To exercise these rights, contact info@phapano.com. We may require verification of your identity before acting on a request.
10. Information Regulator
You may lodge a complaint with the Information Regulator (South Africa), Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191. Complaints under POPIA may be sent to POPIAComplaints@inforegulator.org.za, and complaints under PAIA to PAIAComplaints@inforegulator.org.za.
11. Cookies and tracking
This website does not use advertising cookies or third-party analytics trackers. Fonts and assets are served from our own domain rather than from third-party networks.
12. Children
This website is directed at adults. We do not knowingly collect personal information from children without the consent of a competent person.
13. Changes
We may update this policy from time to time. The effective date at the top of this page indicates when it was last revised. Continued use of the website after a change constitutes acceptance of the revised policy.
14. Contact
info@phapano.com. See also our PAIA manual.