Privacy Policy
Last updated: April 2026
1. Introduction
TruScan Systems (Pty) Ltd (“TruScan”, “we”, “us”, or “our”) is committed to protecting your privacy and ensuring that your personal information is handled in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African legislation.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website (truscan.co.za), partner portal (partners.truscan.co.za), and related services.
2. Information We Collect
We may collect the following types of personal information:
Contact Information: Name, phone number, email address, and business name when you enquire about our services, register as a partner, or submit a lead.
Device Information: Device fingerprint, IP address, browser type, and approximate geographic location when you scan a QR code or access our services. This is collected for fraud prevention purposes.
Financial Information: Bank account details (account number, branch code) when partners request redemption of earned rewards. This information is used solely for processing EFT payments.
Usage Data: Scan activity, points earned, tier progression, and referral activity within our partner programme.
3. How We Use Your Information
We use your personal information for the following purposes:
To provide and improve our automation services; to operate the partner programme including tracking points, tiers, and processing redemptions; to verify your identity via WhatsApp OTP; to detect and prevent fraudulent activity on our platform; to communicate with you about our services, updates, and support; and to comply with legal obligations under South African law.
4. Legal Basis for Processing
We process your personal information on one or more of the following grounds under POPIA: your consent; the performance of a contract with you; compliance with a legal obligation; or our legitimate business interests, provided these do not override your rights.
5. Data Sharing
We do not sell your personal information. We may share your information with trusted service providers who assist us in operating our platform, including Supabase (database hosting), Vercel (website hosting), Meta (WhatsApp messaging), and banking institutions (for processing EFT payments). All service providers are bound by appropriate data processing agreements.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, row-level security on our database, device fingerprinting for fraud prevention, and regular security reviews.
7. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Partner programme data is retained for the duration of your participation and for a reasonable period thereafter for audit and legal purposes. OTP codes are automatically deleted after verification or expiry.
8. Your Rights
Under POPIA, you have the right to: request access to the personal information we hold about you; request correction of inaccurate information; request deletion of your personal information (subject to legal obligations); object to the processing of your information; and withdraw consent where processing is based on consent.
To exercise any of these rights, please contact us at hello@truscan.co.za.
9. Cookies
Our website may use essential cookies to ensure proper functionality. We do not use tracking cookies or third-party advertising cookies.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at: