Privacy policy
This policy explains how we handle personal information under the Protection of Personal Information Act (POPIA).
Responsible party
Brisim (Pty) Ltd (registration number 2026/595218/07) is the responsible party.
Information officer
Our information officer is Brisim (Pty) Ltd's director, [Information officer name], reachable at [Contact email].
Write to the information officer to ask for access, a correction, or deletion, or to complain about how we use your information. You may also complain to the Information Regulator.
What we collect
- Your first name, last name, email address, and optional phone number.
- Your company name, and the email addresses of people you invite.
- A password, stored as a hash. We do not keep the password you typed.
- The date you accepted these terms.
- Your alert settings: provinces, type of work, keywords, and CIDB classes and grades.
- Which tenders we have emailed you, and whether you paused emails.
- A session cookie so you stay logged in, and ordinary server logs such as IP address and the page you requested.
Tender notices themselves are public records. We do not treat the notice text as your personal information.
Why we collect it
- To create your account and let you log in.
- To send the morning tender email, a verification email, a password reset, or a team invitation.
- To show you tenders that match the settings you chose.
- To keep the site secure, limit abuse, and fix faults.
We do not sell personal information. We do not use it for advertising.
Who else sees it
Email is sent through Resend from tenders@notify.brisim.co.za. Resend processes the message, which can mean the content is handled on servers outside South Africa, only so the email can be delivered.
The website is hosted on a server we control. We do not give your account to other contractors.
How long we keep it
- Account details, alert settings, and the record of which tenders we emailed you are kept while the account exists.
- When you delete your account, we delete that profile and its alert settings. Server logs may still contain your IP address until they rotate.
- Application logs are kept for 14 days, then deleted.
- A password-reset link expires on the timetable shown in the email.
Your rights
You can ask the information officer to confirm what we hold, to correct it, or to delete it. You can also delete the account yourself under Settings. You can pause emails with the link in each digest, without logging in.
Security
The site is served over HTTPS. Passwords are hashed. Email links that change your account, such as the pause link and team invitations, are signed so they cannot be edited.