Privacy policy
This policy explains how we handle personal information under the Protection of Personal Information Act (POPIA).
Responsible party
Brisim (Pty) Ltd (registration number 2026/595218/07) is the responsible party.
Information officer
Our information officer is Brisim (Pty) Ltd's director, Simphiwe Ncube, reachable at legal@brisim.co.za.
Write to the information officer to ask for access, a correction, or deletion, or to complain about how we use your information. You may also complain to the Information Regulator.
What we collect
- Your first name, last name, email address, and optional phone number.
- Your company name, and the email addresses of people you invite.
- A password, stored as a hash. We do not keep the password you typed.
- The date you accepted these terms.
- Your alert settings: provinces, type of work, keywords, and CIDB classes and grades.
- Which tenders we have emailed you, and whether you paused emails.
- A session cookie so you stay logged in, and ordinary server logs such as IP address and the page you requested.
Tender notices themselves are public records. We do not treat the notice text as your personal information.
Why we collect it
- To create your account and let you log in.
- To send the morning tender email, a verification email, a password reset, or a team invitation.
- To show you tenders that match the settings you chose.
- To keep the site secure, limit abuse, and fix faults.
We do not sell personal information. We do not use it for advertising.
Who else sees it
Email is sent through Resend from tenders@notify.brisim.co.za. Resend processes the message, which can mean the content is handled on servers outside South Africa, only so the email can be delivered.
The website is hosted on a server we control. We do not give your account to other contractors.
Card details are handled by Payfast. We never store them.
How long we keep it
- Account details, alert settings, and the record of which tenders we emailed you are kept while the account exists.
- When you delete your account, we delete that profile and its alert settings.
- Server access logs, which include your IP address, are kept for up to 14 days, then deleted.
- Application logs are kept for 14 days, then deleted.
- A password-reset link expires after 60 minutes.
- Invoices, payment records, and subscription records are kept for 5 years after the transaction, as the Tax Administration Act requires. We keep those records even if you delete your account.
- Card details are handled by Payfast. We never store them.
Your rights
You can ask the information officer to confirm what we hold, to correct it, or to delete it. You can also delete the account yourself under Settings. You can pause emails with the link in each digest, without logging in.
Security
The site is served over HTTPS. Passwords are hashed. Email links that change your account, such as the pause link and team invitations, are signed so they cannot be edited.