← Docs

Privacy Policy

*Operated by ORION269 (PTY) LTD | CIPC 2026/535275/07*

Effective date: 7 August 2026

This Privacy Policy explains how ORION269 (PTY) LTD, operating WhatsMyBiz.App, collects, uses, stores, shares and protects personal information. It is intended to support compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African law.

1\. Who we are

ORION269 (PTY) LTD is a South African private company registered under CIPC number 2026/535275/07. For processing activities for which ORION269 determines the purpose and means, ORION269 acts as the Responsible Party. Where a Customer determines the purpose and means and ORION269 processes information on the Customer's instructions, ORION269 may act as an Operator.

2\. Information we may collect

3\. How we use information

4\. Lawful processing

ORION269 processes personal information in accordance with the applicable conditions for lawful processing under POPIA. Depending on the circumstances, processing may rely on consent, performance of a contract, compliance with a legal obligation, protection of legitimate interests, or another lawful ground recognised by applicable law. Consent is not treated as a universal substitute where another lawful basis applies.

5\. Business Customer data

A Customer may provide personal information about its own customers, employees, suppliers or other data subjects. Where the Customer determines why and how that information is processed, the Customer remains responsible for its lawful collection, instructions, notices and use. ORION269 processes such information only for authorised service purposes and under the applicable Business Data Processing Terms.

6\. AI processing

WhatsMyBiz may use AI models and supporting infrastructure to generate responses, classify information, retrieve knowledge, automate workflows or otherwise perform the configured service. The specific provider may change over time. ORION269 will use appropriate contractual and technical controls for providers used to process personal information and will not knowingly sell personal information for advertising.

7\. Operators and service providers

Service providers may include hosting, security, messaging, AI, analytics, communications and payment providers. Access is limited to what is reasonably necessary for the relevant service. Payment providers such as PayFast and Yoco may process payment information directly under their own terms and privacy practices.

8\. Cross-border processing

Some service providers may process information outside South Africa. Where POPIA requires conditions for cross-border transfer, ORION269 will take reasonable steps to ensure that the applicable requirements are met, including appropriate contractual or other lawful safeguards.

9\. Direct marketing

ORION269 will conduct direct marketing using electronic communications only where permitted by applicable law. Customers may unsubscribe from marketing communications where an unsubscribe mechanism is required.

10\. Security

No internet or cloud service can be guaranteed to be completely secure. ORION269 will take reasonable technical and organisational measures appropriate to the nature and risk of the information.

11\. Retention

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, contractual requirements, legitimate business needs, dispute handling, security, or legal obligations. Following service termination, Customer business data will generally be scheduled for deletion within 60 days, subject to legal retention requirements, active disputes, security requirements and secure backup cycles. Accounting and tax records may be retained for the period required by law.

12\. Data subject rights

Subject to applicable law and verification of identity, data subjects may have rights including access to personal information, correction, deletion where lawful, objection to certain processing, withdrawal of consent where consent is the lawful basis, and the right to lodge a complaint with the Information Regulator.

13\. Cookies and website technologies

WhatsMyBiz may use cookies or similar technologies necessary for website functionality, security, preferences, analytics or other permitted purposes. Where consent is legally required for a non-essential technology, the relevant consent mechanism will be used.

14\. Children

WhatsMyBiz is primarily a business service. Customers must not intentionally use the service to collect or process children's personal information except where lawful and appropriate safeguards and authorisations are in place.

15\. Information Officer and contact

Information Officer: Graham Schubach

Email: hello@whatsmybiz.app

Company email: info@oriondevcore.com

WhatsApp: \+27 72 497 1810

Physical address: 26 Vasco da Gama Drive, Amanzimtoti, Durban, Kwa-Zulu Natal, 4001

16\. Complaints

A complaint may first be sent to ORION269 at the contact details above. A data subject may also contact the Information Regulator of South Africa through its official channels. The Regulator's current contact information is available on its official website.