Skip to content
Qmuzik

Effective Date: 14 September 2026

1. Introduction and Scope

Qmuzik Technologies (Pty) Ltd. (“Qmuzik”, “we”, “us” or “our”) is committed to protecting the personal information of all persons who interact with us, our website, platform and services.

This Privacy Notice explains how we collect, use, store, share and otherwise process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and all applicable South African data protection legislation.

This Privacy Notice applies to all users of our website, mobile application, platform and related services (collectively, the “Services”), including visitors, registered users, subscribers and any other persons whose personal information we process.

By accessing or using our Services, you acknowledge that you have read, understood and agree to the processing of your personal information as described in this Privacy Notice.

2. Definitions

In this Privacy Notice, unless the context indicates otherwise, the following terms shall have the meanings assigned to them below, which are aligned with the definitions in POPIA:

  • “Consent” means any voluntary, specific and informed expression of will in terms of which permission is given for the processing of personal information;
  • “Data Subject” means the person to whom personal information relates, which may include a natural or juristic person;
  • “Information Officer” means the person duly appointed and registered with the Information Regulator who is responsible for ensuring compliance with POPIA within Qmuzik;
  • “Information Regulator” means the Information Regulator established in terms of section 39 of POPIA, being the independent body responsible for monitoring and enforcing compliance with POPIA;
  • “Operator” means a person who processes personal information for a responsible party in terms of a contract or mandate, without coming under the direct authority of that responsible party, as contemplated in section 1 of POPIA;
  • “Personal Information” means information relating to an identifiable, living, natural person or an identifiable, existing juristic person, as defined in section 1 of POPIA, including but not limited to information relating to the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language, birth, education, medical, financial, criminal or employment history, any identifying number, symbol, email address, physical address, telephone number, location information, online identifier, biometric information, personal opinions, views or preferences, correspondence of a private or confidential nature, or the views or opinions of another individual about the person;
  • “Processing” means any operation or activity, or any set of operations, whether or not by automatic means, concerning personal information, including the collection, receipt, recording, organisation, collation, storage, updating, modification, retrieval, alteration, consultation, use, dissemination, distribution, merging, linking, restriction, degradation, erasure or destruction of information;
  • “POPIA” means the Protection of Personal Information Act 4 of 2013, as amended from time to time, together with all regulations promulgated thereunder;
  • “Responsible Party” means a public or private body or any other person which, alone or in conjunction with others, determines the purpose of and means for processing personal information — in this context, Qmuzik Technologies (Pty) Ltd.;
  • “Special Personal Information” means personal information as defined in section 26 of POPIA, including information concerning a data subject’s religious or philosophical beliefs, race or ethnic origin, trade union membership, political persuasion, health or sex life, biometric information, or criminal behaviour;
  • “We”, “Us” or “Our” refers to Qmuzik Technologies (Pty) Ltd., the responsible party as contemplated in POPIA;
  • “You” or “Your” refers to the data subject whose personal information is being processed.

3. Identity and Contact Details of the Responsible Party

The responsible party for the purposes of POPIA is:

  • Full name: Qmuzik Technologies (Pty) Ltd.
  • Registration number: 1995/008101/07
  • Registered address: Building A, Erasmus Forum, 434 Rigel Avenue, Erasmusrand, Pretoria, 0181, South Africa
  • Email address: sales@qmuzik.com
  • Telephone number: +27 12 640 3500

4. Information Officer

Qmuzik has appointed an Information Officer who is registered with the Information Regulator in accordance with section 55 of POPIA. The Information Officer is responsible for encouraging compliance with POPIA, dealing with requests made to Qmuzik in terms of POPIA, and working with the Information Regulator in relation to investigations conducted in terms of POPIA.

The contact details of the Information Officer are as follows:

  • Name: Adriaan Voges
  • Email address: sales@qmuzik.com
  • Telephone number: +27 12 640 3500

The Information Officer has been duly registered with the Information Regulator as required by section 55(2) of POPIA.

5. Personal Information We Collect

We may collect and process the following categories of personal information, depending on the nature of your interaction with our Services:

  • Identity information: your full name, identity number or passport number, date of birth, gender, nationality and photograph;
  • Contact information: your email address, telephone number, physical address and postal address;
  • Account information: your username, password hash, account preferences and profile information;
  • Financial information: payment card details, bank account information, billing address and transaction history, as required to process payments for our Services;
  • Technical information: your Internet Protocol (IP) address, browser type and version, device type and identifiers, operating system, time zone setting, cookie data and other technology on the devices you use to access our Services;
  • Usage data: information about how you use our Services, including features accessed, pages visited, actions taken, timestamps, frequency of use and interaction data;
  • Communications: records and content of correspondence with us, including support queries, feedback, survey responses and any other communications;
  • Any other personal information that you voluntarily provide to us in the course of using our Services or communicating with us.

6. Purpose of Processing

We process your personal information for the following purposes:

  • to provide, operate and maintain our Services, including creating and managing your account;
  • to process payments and transactions related to your use of the Services;
  • to communicate with you, including sending service-related notifications, updates, security alerts and administrative messages;
  • to improve, personalise and enhance our platform, Services and user experience;
  • to detect, investigate and prevent fraud, security breaches, unauthorised access and other potentially prohibited or illegal activities;
  • to conduct direct marketing, but only where you have provided your prior consent or where we are permitted to do so in terms of section 69 of POPIA;
  • to fulfil our contractual obligations to you and to enforce our terms and conditions;
  • to conduct research, analysis and statistical studies, using anonymised or aggregated data where possible, in order to improve our Services.

7. Legal Basis for Processing

In accordance with section 11 of POPIA, we process your personal information on one or more of the following legal bases:

  • Consent: you have given your consent to the processing of your personal information for one or more specific purposes;
  • Contract: processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract;
  • Legal obligation: processing is necessary for compliance with a legal obligation to which Qmuzik is subject;
  • Legitimate interest: processing is necessary for the pursuit of the legitimate interests of Qmuzik or of a third party to whom the information is supplied, provided that such interests are not overridden by your rights as a data subject;
  • Vital interest: processing is necessary to protect your vital interests or the vital interests of another natural person;
  • Public interest: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in Qmuzik.

Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.

8. How We Collect Personal Information

We collect personal information in the following ways:

  • Directly from you: when you register for an account, subscribe to our Services, complete forms, make payments, communicate with us, participate in surveys, or otherwise provide information to us directly;
  • Automatically through technology: when you access or use our Services, we automatically collect certain technical and usage information through cookies, web beacons, log files, analytics tools and similar tracking technologies;
  • From third parties: we may receive personal information about you from third-party service providers, including payment processors, social media platforms (where you choose to log in using a social media account), identity verification services and publicly available sources.

Where we collect personal information from a source other than you, we will inform you of the source and the categories of information collected, unless doing so is prohibited by law or would involve a disproportionate effort.

9. Cookies and Tracking Technologies

Our Services use cookies and similar tracking technologies to enhance your experience, analyse usage patterns and deliver relevant content. Cookies are small text files that are placed on your device when you visit our website or use our platform.

We use the following types of cookies:

  • Essential cookies: these are strictly necessary for the operation of our Services and cannot be switched off. They enable core functionality such as security, account authentication and session management;
  • Performance cookies: these collect information about how you use our Services, such as which pages you visit most often and whether you experience any errors. These cookies help us improve the performance of our Services;
  • Functional cookies: these enable enhanced functionality and personalisation, such as remembering your preferences and settings;
  • Marketing cookies: these are used to track your activity across websites and to deliver advertisements that are relevant to your interests. These cookies are only placed with your prior consent.

Non-essential cookies will only be placed on your device with your prior consent. You may manage your cookie preferences through your browser settings or through any cookie consent mechanism provided on our website. Please note that disabling certain cookies may affect the functionality of our Services.

For further information on our use of cookies, please refer to our Cookie Policy, where applicable.

10. Sharing and Disclosure

We may share or disclose your personal information in the following circumstances:

  • Service providers and operators: we engage third-party service providers who act as operators in terms of sections 20 and 21 of POPIA, to assist us in providing our Services. These operators process personal information solely on our instructions and under written agreements that require them to implement appropriate security measures and to comply with POPIA;
  • Business partners: we may share personal information with business partners where necessary for the provision of integrated or co-branded services, subject to appropriate data protection safeguards;
  • Legal obligations: we may disclose personal information where required to do so by law, regulation, court order or governmental request, in accordance with section 18 of POPIA and other applicable legislation;
  • Business transfers: in the event of a merger, acquisition, reorganisation, sale of assets or similar corporate transaction, your personal information may be transferred to the relevant third party, subject to the provisions of POPIA;
  • With your consent: we may share your personal information with third parties where you have provided your explicit consent to such sharing;
  • Aggregated and anonymised data: we may share aggregated or anonymised data that does not constitute personal information as defined in POPIA, for research, analytical or commercial purposes.

We will not sell your personal information to any third party.

11. Cross-Border Transfers

In certain circumstances, it may be necessary for us to transfer your personal information to a party located in a foreign country. In accordance with section 72 of POPIA, we will only transfer personal information to a recipient in another country if one or more of the following conditions are met:

  • the recipient country has adequate data protection legislation that provides a comparable level of protection to POPIA;
  • the recipient is subject to binding corporate rules or a binding agreement that provides an adequate level of protection;
  • you have consented to the transfer of your personal information;
  • the transfer is necessary for the performance of a contract between you and Qmuzik, or for the implementation of pre-contractual measures taken in response to your request;
  • the transfer is necessary for the conclusion or performance of a contract concluded in your interest between Qmuzik and a third party;
  • the transfer is for your benefit and it is not reasonably practicable to obtain your consent, but if it were, you would be likely to give it.

We will take all reasonable steps to ensure that your personal information continues to be protected in compliance with POPIA when transferred across borders.

12. Retention of Personal Information

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, as set out in this Privacy Notice, unless a longer retention period is required or permitted by law.

In determining the appropriate retention period, we consider the following criteria:

  • the nature, scope and sensitivity of the personal information;
  • the purposes for which the personal information is processed;
  • applicable legal, regulatory and contractual requirements, including prescription periods;
  • the potential risk of harm from unauthorised use or disclosure of the personal information;
  • whether the purpose of processing can be achieved through other means.

In accordance with section 14 of POPIA, we will not retain personal information for longer than is necessary, and records of personal information shall not be retained unless retention is required or authorised by law, required by a contract, the data subject has consented to retention, or retention is necessary for a lawful purpose related to a function or activity of Qmuzik.

Once personal information is no longer required, we will securely destroy, delete or de-identify it in a manner that prevents reconstruction or further processing.

13. Security Measures

Qmuzik is committed to ensuring the security and integrity of the personal information under our control. We have implemented appropriate technical and organisational measures to protect personal information against loss, damage, unauthorised access, interference, modification, destruction or disclosure.

Our security measures include, but are not limited to:

  • encryption of personal information in transit and at rest, using industry-standard encryption protocols;
  • strict access controls, ensuring that personal information is only accessible to authorised personnel who require access for legitimate business purposes;
  • regular security testing, vulnerability assessments and penetration testing of our systems and infrastructure;
  • firewalls, intrusion detection systems and other security technologies to protect against unauthorised access;
  • employee awareness training on data protection and information security obligations;
  • regular review and updating of our security policies and procedures.

In the event of a security compromise involving personal information, we will notify the Information Regulator and affected data subjects as soon as reasonably possible in accordance with section 22 of POPIA, providing all information as required by law.

While we take all reasonable steps to protect your personal information, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Data Subject Rights under POPIA

As a data subject, you have the following rights under POPIA, which you may exercise at any time:

  • Right of access (section 23): you have the right to request confirmation of whether or not we hold personal information about you, and to request access to such information, including a description of the information held, the categories of third parties who have or have had access to the information, and the identity of all third parties who have or have had access to the information;
  • Right to correction (section 24): you have the right to request the correction or deletion of personal information about you that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully;
  • Right to deletion: you have the right to request the deletion or destruction of personal information that we are no longer authorised to retain in terms of POPIA;
  • Right to object to processing (section 11(3)): you have the right to object, on reasonable grounds relating to your particular situation, to the processing of your personal information, unless legislation provides for such processing;
  • Right to object to direct marketing (section 69): you have the right to object to the processing of your personal information for the purposes of direct marketing by means of unsolicited electronic communications at any time;
  • Right to lodge a complaint: you have the right to submit a complaint to the Information Regulator if you believe that we have interfered with the protection of your personal information;
  • Right to withdraw consent: where processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.

To exercise any of the above rights, please submit a written request to our Information Officer using the contact details set out in this Privacy Notice.

For the protection of your personal information, we may require you to verify your identity before processing your request. We may request such information as is reasonably necessary to confirm your identity.

We will respond to your request within a reasonable period, and in any event within the timeframes prescribed by POPIA. If we are unable to comply with your request, we will provide you with written reasons for the refusal.

15. Direct Marketing

We may process your personal information for the purpose of direct marketing, which includes contacting you by electronic means to inform you about our products, services, promotions and events.

In accordance with section 69 of POPIA, we will only send you direct marketing communications where:

  • you have given your prior consent to receive such communications; or
  • you are an existing customer and the marketing relates to similar products or services that you have previously purchased or enquired about (the “pre-existing customer exception”), and you have been given a reasonable opportunity to object to the use of your information for direct marketing purposes.

Every direct marketing communication will include an easy and accessible mechanism for you to opt out of receiving future communications. Upon receipt of your opt-out request, we will cease processing your personal information for direct marketing purposes within a reasonable time.

You may also object to receiving direct marketing communications at any time by contacting our Information Officer using the details provided in this Privacy Notice.

16. Children’s Personal Information

Our Services are not directed to children under the age of 18 years, and we do not knowingly collect personal information from children.

In accordance with section 35 of POPIA, personal information of a child (being a natural person under the age of 18 years who is not legally competent) may only be processed if such processing is carried out with the prior consent of a competent person (being any person who is legally competent to consent on behalf of the child, including a parent or legal guardian), where the processing is necessary for the establishment, exercise or defence of a right or obligation in law, or where the processing is otherwise permitted in terms of POPIA.

If we become aware that we have collected personal information from a child without the consent of a competent person, we will take reasonable steps to delete such information as soon as practicable.

If you believe that we have inadvertently collected personal information from a child, please contact our Information Officer immediately using the details set out in this Privacy Notice.

17. Automated Decision-Making

Qmuzik may use automated decision-making processes, including profiling, to enhance the Services and improve your experience on our platform. Automated decision-making refers to a decision that is made solely by automated means, without any human involvement.

Where automated decision-making is used in a manner that produces legal effects concerning you or similarly significantly affects you, you have the right to:

  • be informed that automated decision-making is taking place;
  • request meaningful information about the logic involved;
  • object to the automated decision and request human intervention;
  • express your point of view and contest the decision.

To exercise any of these rights, please contact our Information Officer using the details provided in this Privacy Notice.

18. Complaints

If you have any concerns or complaints about the manner in which your personal information has been processed by Qmuzik, you are encouraged to first submit a complaint to our Information Officer using the contact details set out in this Privacy Notice. We will investigate and respond to your complaint within a reasonable period.

If you are not satisfied with our response, or if you believe that your rights under POPIA have been infringed, you have the right to lodge a complaint with the Information Regulator. The contact details of the Information Regulator are as follows:

  • Physical address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
  • Email: POPIAComplaints@inforegulator.org.za
  • Telephone: 010 023 5207

19. Changes to this Privacy Notice

We reserve the right to update or amend this Privacy Notice from time to time to reflect changes in our processing activities, legal requirements or business practices.

Where we make material changes to this Privacy Notice, we will notify you by prominent notice on our website, by email or through our platform, prior to the changes taking effect.

Your continued use of our Services following the posting of any amendments to this Privacy Notice constitutes your acceptance of such amendments.

We encourage you to review this Privacy Notice periodically to stay informed about how we are protecting your personal information.

20. Contact Us

If you have any questions, concerns or requests regarding this Privacy Notice or the processing of your personal information, please contact us using the following details:

  • Qmuzik Technologies (Pty) Ltd.
  • Physical address: Building A, Erasmus Forum, 434 Rigel Avenue, Erasmusrand, Pretoria, 0181, South Africa
  • Email address: sales@qmuzik.com
  • Information Officer email: sales@qmuzik.com

21. Effective Date

This Privacy Notice is effective as of 14 September 2026.