Privacy Policy
This policy explains what personal information BrokaBoy collects when you use this website, why we collect it, how long we keep it, and the rights you have under the Protection of Personal Information Act 4 of 2013 (POPIA).
Last reviewed: this policy is maintained by BrokaBoy's Compliance Officer and is reviewed whenever our data practices change.
1. Who is the responsible party
Under POPIA, the “responsible party” is the entity that decides why and how your personal information is processed. For this website that is BrokaBoy.
Registered entity details, registration number and the formally appointed Information Officer are to be confirmed once business registration is finalized. Until then, all privacy queries are handled by our Compliance Officer - contact us via our Contact page.
2. What personal information we collect
- Information you give us. If you use the contact form, we collect the name, email address, subject and message you type in. If a newsletter sign-up is offered, we collect the email address you submit.
- Technical information. Your IP address (truncated where possible), browser type and version, device type, operating system, screen size, referring URL and the pages you view on BrokaBoy.
- Usage information. Which comparisons you run, which brokers you add to the compare tray, search terms you enter, and which outbound broker links you click.
- Cookie identifiers. Randomly generated identifiers stored in cookies or browser storage, used to remember your preferences and to attribute affiliate referrals.
We do not ask for and do not want special personal information as defined in POPIA (health, biometrics, religious or political beliefs, criminal history), and we do not knowingly collect information from children under 18. BrokaBoy holds no client money, opens no trading accounts and never asks you for banking, card or trading-account credentials.
3. Why we process it (lawful basis)
- To answer you. Contact-form data is processed to respond to your enquiry - this is processing necessary to take steps you have asked for.
- To run and secure the site. Technical logs support performance, fraud prevention and abuse mitigation, based on our legitimate interest in a working, secure website.
- To measure and improve. Aggregated analytics tell us which comparisons and guides are useful. This is based on your consent, given through the cookie banner.
- To be paid. Affiliate tracking records that a referral came from BrokaBoy so a partner broker can attribute a commission. This is based on your consent and our legitimate commercial interest.
4. Cookie categories we use
- Strictly necessary. Remember your cookie choice, keep your compare selection during a session, and protect against abuse. These cannot be switched off without breaking the site.
- Preference. Remember interface choices such as filters or the last comparison you built.
- Analytics. Measure page views, search terms and journeys in aggregate. Set only after you accept in the cookie banner.
- Affiliate / marketing attribution. Set by us or by partner brokers when you click an outbound “Visit Broker” link so that a referral can be credited. Typically expire within 30 to 90 days depending on the partner.
You can reject non-essential cookies in our banner, and you can clear or block cookies in your browser at any time. Rejecting analytics and attribution cookies does not restrict any content on BrokaBoy.
5. Sharing with third parties
We do not sell personal information. We share limited information with:
- Affiliate networks and partner brokers - a click identifier and referral source when you follow an outbound link. Once you land on a broker's own site, that broker's privacy policy governs everything you do there, including any account application. See our Methodology for how these commercial relationships are kept separate from ratings.
- Analytics providers - aggregated usage data, where consented.
- Hosting and infrastructure providers - who process server logs strictly on our instructions as operators under POPIA.
- Regulators, or where the law requires it - if we are legally compelled to disclose information.
Some of these providers operate outside South Africa. Where information is transferred across borders, we rely on POPIA section 72 and use providers that are subject to comparable data protection standards or binding contractual safeguards.
6. How long we keep it
- Contact-form messages: up to 24 months after the enquiry is closed.
- Newsletter email addresses: until you unsubscribe, then removed within 30 days.
- Server and security logs: up to 12 months.
- Analytics data: retained in aggregated, non-identifying form up to 26 months.
- Affiliate attribution identifiers: for the partner's cookie window, usually 30 to 90 days.
7. How we store and protect it
Information is stored on reputable hosted infrastructure, transmitted over HTTPS, and access is limited to the people who need it to run the site. We keep the amount of personal information we hold deliberately small - the broker catalogue itself contains no user data. If a security compromise affects your personal information, we will notify you and the Information Regulator as required by POPIA section 22.
8. Your rights under POPIA
- Access. Ask whether we hold personal information about you and request a copy of it.
- Correction. Ask us to correct information that is inaccurate, misleading or out of date.
- Deletion. Ask us to delete or destroy information we no longer have a lawful reason to keep.
- Objection. Object, on reasonable grounds, to processing based on legitimate interest - including analytics and affiliate attribution.
- Withdraw consent. Withdraw cookie or marketing consent at any time, without affecting processing that already took place.
- Complain. Lodge a complaint with the Information Regulator of South Africa if you believe your rights have been infringed.
To exercise any of these, contact us via our Contact page with enough detail for us to identify your records. We aim to respond within 30 days.
9. Changes to this policy
We update this policy when our data practices, tools or legal obligations change. The current version always appears on this page, and material changes will be highlighted on the site.
10. Contact
Privacy and data requests: please contact us via our Contact page. A physical business address will be published here upon company registration.