Privacy Policy

Last Updated: March 30, 2025

1. Introduction

iFeedback Consulting (Pty) LTD ("iFeedback," "we," "us," "our"), registered in South Africa, is committed to protecting your privacy and handling your personal information responsibly and in compliance with the Protection of Personal Information Act (POPIA) and other applicable data protection laws.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ifeedback.app (the "Platform"), participate in the iFeedback Citizen Scientist community, or interact with surveys deployed through our services. This Policy also applies to related websites we control where this policy is posted (like conservationmag.org and ifeedback.co.za if applicable).  

This Policy does not apply to third-party websites or services linked to from our Platform. Please review their privacy policies independently.

2. Information Officer

Our designated Information Officer responsible for overseeing compliance with POPIA is:

  • Name: Adriaan Buys
  • Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Please contact the Information Officer with any questions or concerns regarding this policy or your personal information.

3. Information We Collect

We may collect the following types of information:

  • Personal Information You Provide:
    • Citizen Scientist Sign-up: When you voluntarily join the iFeedback Citizen Scientist community via our sign-up forms (e.g., on ifeedback.app), we collect your email address, name, and any demographic information you choose to provide (such as Country, Age Range, Gender, City). The lawful basis for this collection is your consent.
    • Contact Form Submissions: Information you provide when contacting us via forms on ifeedback.app, such as your name, email address, and the content of your message. The lawful basis is typically consent or legitimate interest in responding to your query.
    • Survey Responses (Non-Anonymous): In rare cases, specific research studies conducted by our university clients may require non-anonymous responses. This will always be explicitly stated in the survey invitation and requires your specific, informed consent before participation, based on approved University Ethics Committee protocols.
  • Information Collected for Specific Projects (Professional Roles):
    • For certain research projects requiring participants in specific professional roles (e.g., Marketing Managers, IT Managers), we may process professional contact information (like name, company email, job title) sourced from reputable, third-party B2B data providers who state they comply with POPIA (e.g., Interactive Direct). Invitations are sent based on the likely relevance of the study to your professional role. The lawful basis we rely on is typically legitimate interest, balanced against your rights. You always have the right to object or unsubscribe.
  • Information Collected Automatically:
    • Log Data: Like most websites, our servers automatically collect information when you access the Platform, such as your IP address, browser type, operating system, access times, and pages viewed.
    • Cookies: We use cookies (small text files stored on your device) to enhance user experience, maintain sessions, and potentially gather anonymised usage statistics. You can control cookie settings through your browser.
  • Information from Survey Responses (Anonymous):
    • For the vast majority of surveys facilitated through our platform, your responses are collected anonymously. Your personal identifiers (name, email) are not linked to your survey answers provided to researchers.

4. How We Use Your Information

We use the information we collect for purposes including:

  • To manage your membership in the iFeedback Citizen Scientist community.
  • To send you relevant invitations for research surveys, online polls ('Green Insights'), based on your opt-in consent or, for specific professional studies, based on legitimate interest.
  • To facilitate the collection of anonymous or (with explicit consent) non-anonymous data for research projects conducted by our academic and other clients.
  • To respond to your inquiries submitted via the contact form on ifeedback.app.
  • To operate, maintain, and improve our Platform and services.
  • To monitor platform security and prevent fraud.
  • To comply with legal obligations and enforce our terms.
  • To publish aggregated, anonymized insights (e.g., from 'Green Insights' polls).

5. Lawful Basis for Processing (POPIA)

We process your personal information based on the following lawful bases under POPIA:

  • Consent: Where you have given explicit permission (e.g., signing up for the Citizen Scientist community, agreeing to non-anonymous surveys).
  • Legitimate Interest: Where necessary for our legitimate business interests (e.g., sending relevant B2B survey invitations, ensuring platform security, responding to queries), provided these interests are not overridden by your fundamental rights and freedoms. (Legal review recommended for B2B basis).
  • Legal Obligation: Where necessary to comply with South African law.

6. Information Sharing and Disclosure

We do not sell your personal contact information. We may share information under the following circumstances:

  • With Researchers: Primarily anonymized or aggregated data is shared. In the rare case of non-anonymous studies, your information is only shared with the specific researcher based on your explicit prior consent and subject to university ethics approval.
  • With Service Providers: We may share information with third-party vendors who perform services on our behalf (e.g., hosting providers like Scala Hosting & Hetzner, email service providers like Amazon SES) under strict contractual agreements ensuring data protection.
  • For Legal Reasons: If required by law, subpoena, or other legal process, or if necessary to protect our rights, property, or safety, or the rights, property, or safety of others.
  • Business Transfers: If iFeedback Consulting (Pty) LTD is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to confidentiality agreements.  

7. Data Security

We implement reasonable administrative, technical, and physical security measures designed to protect your personal information from unauthorised access, use, alteration, or destruction. However, no internet transmission or electronic storage is 100% secure.  

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, manage your participation in the community, or comply with legal obligations, whichever is longer. You can request deletion of your data as outlined in your rights below. Suppression list information (to honour unsubscribes) is kept indefinitely unless requested otherwise under specific circumstances.  

9. Your Rights Under POPIA

As a data subject in South Africa, you have rights regarding your personal information:

  • Right of Access: You can request details of the personal information we hold about you.
  • Right to Rectification: You can request correction of inaccurate or incomplete information.  
  • Right to Erasure (Deletion): You can request the deletion of your personal information under certain conditions.  
  • Right to Object: You can object to the processing of your personal information based on legitimate interests or for direct marketing.  
  • Right to Restrict Processing: You can request the limitation of processing under certain circumstances.
  • Right to Complain: You have the right to lodge a complaint with the South African Information Regulator if you believe your rights have been infringed.

To exercise these rights, please contact our Information Officer (details in Section 2 and 13). We will respond to your request in accordance with POPIA.

10. Cookies and Tracking Technologies

We use cookies primarily for website functionality and user experience (e.g., remembering login status if applicable). We may use analytics tools that use cookies to collect anonymous usage data. You can manage cookie preferences through your browser settings.

11. Third-Party Links

Our Platform may contain links to other websites. We are not responsible for the privacy practices of these third-party sites. We encourage you to read their privacy policies.  

12. Children's Privacy

Our Platform and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children.  

13. International Data Transfers

Your information may be stored and processed on servers located outside of South Africa (e.g., cloud hosting providers). We take steps to ensure that any such transfers comply with POPIA requirements, typically by using service providers who offer adequate data protection standards or contractual clauses.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on the Platform with an updated "Last Updated" date. We encourage you to review this policy periodically.  

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact our Information Officer:  

  • Name: Adriaan Buys
  • Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
  • Company: iFeedback Consulting (Pty) LTD
  • Registered Address: 8 Glencaird Road, Glencairn, Cape Town, South Africa, 7975.