How we collect, use, protect, and respect your personal information.
Jump to any section of our Privacy Policy below.
We are NFC Cards South Africa, a division of ProfileMe (Pty) Ltd (Reg. No: 2019/207663/07). We respect your privacy and take the protection of personal information very seriously.
The purpose of this policy is to describe:
This policy applies to you if you are any of the following:
A customer who has purchased NFC business cards, NFC phone tags, or related products from us.
A subscriber to our digital business card service (optional add-on at R49/month).
A corporate client managing a team of NFC card users under a company account.
A member of the public who taps an NFC card or scans a QR code to view a digital profile.
We are the Responsible Party under POPIA and a Controller under GDPR.
Reach our appointed Information Officer at:
hello@nfccardsouthafrica.co.za
Lodge a complaint with the Regulator at:
inforeg@justice.gov.za
Understanding what counts — and what doesn't — as personal information.
| Category | Examples |
|---|---|
| Identifying Information | Name, surname, designation, profile photo |
| Contact Information | Email address, phone number, delivery address, office address |
| Professional Information | Job title, company name, biography, credentials, logo |
| Payment Information | Credit card details or EFT confirmations (via secure third-party processors) |
| Order Information | Order number, product purchased, shipping address, delivery tracking |
| Technical Information | IP address, browser type, device information |
We collect personal information through the following touchpoints:
When you purchase NFC business cards, phone tags, or custom branded products — we collect your name, email, delivery address, and payment details.
When you upload your logo or branding assets for custom NFC cards or bulk tags, we process these files to prepare your order.
If you subscribe (R49/month), you provide your name, job title, company, contact details, profile photo, cover image, and social links.
When someone taps your NFC card or scans your QR code, we log IP address, device type, browser, timestamp, and geographic location (country/city only).
When you contact us via our website, email, or WhatsApp for support, quotes, or general enquiries.
We automatically receive limited usage information such as IP address and device/browser details. See our Cookie Policy for full details.
We may process your personal information for the following clearly defined purposes:
We process personal information under the following legal grounds:
For publishing a public digital business card profile, sending marketing newsletters, or using optional digital features.
To perform our obligations when you purchase NFC products or subscribe to digital business card services.
To maintain security, improve products and services, respond to customer enquiries, and provide analytics.
Where law requires us to keep certain records — e.g. tax, accounting, and consumer protection requirements.
NFC Cards South Africa is a cloud-hosted platform. Personal information may be stored in or processed from reputable international cloud data centres located outside South Africa.
Public-facing digital business card profiles are delivered via a global CDN. The CDN only caches and serves static, non-confidential content (profile text, images, layout files). No private or sensitive personal information is stored or distributed through the CDN.
Order details, customer accounts, payment information, authentication data, databases, and APIs are hosted and processed within secure cloud environments subject to strong contractual and technical safeguards.
We may share personal information only with the following categories of recipients, and only to the extent necessary:
| Recipient | Purpose | Data Shared |
|---|---|---|
| Service Providers | Cloud hosting, email, customer support, related services | Bound by contracts and Data Processing Agreements |
| Payment Processors | Securely process credit card, debit card, or EFT payments | Payment details only (via PCI-DSS compliant processors) |
| Courier & Delivery Partners | Fulfil shipping of NFC cards and phone tags | Name, delivery address, phone number, order details only |
| Printing & Production Partners | Manufacture custom branded NFC cards and bulk tags | Logo, branding assets, and order specifications only |
| Authorities | Where required by law or regulation | Tax authorities, law enforcement, regulatory bodies |
We retain personal information only as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law.
| Data Type | Retention Period | Reason |
|---|---|---|
| Order Records (NFC cards, phone tags) | At least 5 years | South African tax and consumer protection law |
| Digital Business Card Profile Data (optional) | While subscription is active; deleted/anonymised within 30 days after cancellation | Service delivery; data minimisation |
| Custom Branding Files (logos, designs) | Duration of relationship; deleted upon request or within 1 year of account closure | Future orders or reprints support |
| Analytics & Usage Logs | While subscription is active, then anonymised | Aggregated analytics may be retained indefinitely |
| Marketing Lists & Newsletters | Until you unsubscribe | Consent-based processing |
| Support & Inquiry Records | 3 years | Customer service and dispute resolution |
We use industry-standard security measures to protect your personal information:
All data transmitted between your browser and our servers is encrypted via HTTPS/TLS.
Sensitive data stored in our databases is encrypted using AES-256 encryption.
Only authorised personnel have access to personal information, and all access is logged and monitored.
We use secure, enterprise-grade cloud hosting providers under strong contractual data protection commitments.
We monitor for security threats and have procedures to respond promptly to any data breaches.
Credit card and payment information is processed through PCI-DSS compliant third-party payment processors. We do not store full card details.
Under POPIA and GDPR, you have the following rights regarding your personal information:
Request a copy of the personal information we hold about you.
Update inaccurate information or request deletion of your data (subject to legal retention requirements).
Object to processing in certain circumstances — e.g. for marketing purposes or where processing is based on legitimate interest.
Unsubscribe from marketing emails or deactivate your digital business card profile at any time.
Request a copy of your data in machine-readable format where applicable (GDPR right).
Contact the Information Regulator at inforeg@justice.gov.za if you believe we have violated your privacy rights.
We may require you to verify your identity before actioning a request.
To exercise any of these rights, contact our Information Officer at hello@nfccardsouthafrica.co.za
We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child under 18, we will delete it promptly.
If you believe a child has provided us with personal information, please contact us immediately at hello@nfccardsouthafrica.co.za.
Our website and digital business card profiles may contain links to third-party websites, social media platforms, or external services such as LinkedIn, Instagram, WhatsApp, and Calendly.
NFC Cards South Africa offers two distinct types of services, each with different data implications.
When you purchase NFC business cards, NFC phone tags, or custom branded products (no subscription required), we collect:
We may update this Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. The updated version will always be available at nfccardsouthafrica.co.za/privacy-policy.
For any queries or requests relating to your personal information, please reach out to our Information Officer:
ProfileMe (Pty) Ltd
Pretoria, Gauteng
South Africa