ComplyOS is operated by Bathopele Group (Pty) Ltd, a company registered in South Africa. We are the responsible party for personal information collected through this platform in terms of the Protection of Personal Information Act 4 of 2013 (POPIA).
We collect information you provide directly, including: your name, email address, phone number, club details, and compliance documents you upload. We also collect usage data such as feature interactions and session logs to improve the platform.
For club members registered through the platform, we collect: full name, ID number, contact details, medical/sports certifications, and any other information your club administrator provides.
We use your information to: provide and improve the ComplyOS platform, send transactional communications (compliance alerts, expiry reminders), generate compliance scores and reports, and comply with our legal obligations.
We do not sell your personal information to third parties. We do not use your data for advertising.
We process your personal information on the following bases: performance of a contract (providing the service you subscribed to), legitimate interest (platform improvement and security), compliance with legal obligations, and consent where specifically requested.
Your data is stored on Supabase infrastructure hosted in Supabase's AWS regions. We implement appropriate technical and organisational measures to protect your data, including row-level security, encrypted storage, and access controls. However, no system is 100% secure.
We use the following third-party services to operate the platform:
Supabase — database and authentication infrastructure.
Resend — transactional email delivery.
PayFast — payment processing for subscriptions.
Twilio — optional WhatsApp notifications.
Netlify — frontend hosting.
Each provider is subject to their own privacy policy and data processing terms.
You have the right to: access the personal information we hold about you, request correction of inaccurate data, request deletion of your data (subject to legal retention requirements), object to processing in certain circumstances, and lodge a complaint with the Information Regulator of South Africa.
We retain your data for as long as your account is active and for 90 days after termination. Certain records may be retained longer where required by law. Compliance documents uploaded by your club are retained for the period specified by applicable sporting body regulations.
We use only essential cookies required for authentication (Supabase session cookies). We do not use tracking or advertising cookies.
To exercise your rights or raise a privacy concern, contact our Information Officer at privacy@complyos.co.za. If you are not satisfied with our response, you may contact the Information Regulator at www.justice.gov.za/inforeg.