Your Privacy Matters. Our Commitment to Responsible Information Handling.

01 Introduction

At 4T Arrows, we respect your privacy and are committed to handling personal information responsibly, transparently and securely.

This Privacy Policy explains how 4T Arrows (Pty) Ltd (“4T Arrows”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal information when people engage with our business, website, initiatives and related services.

We aim to process personal information in accordance with applicable South African legislation, including the Protection of Personal Information Act 4 of 2013 (POPIA).

02 Who This Policy Applies To

This policy applies to visitors to our website, individuals making enquiries, prospective customers, partners, suppliers and others who interact with 4T Arrows.

It covers personal information collected through our website, contact forms, Church Management & Discipleship Platform (CMP) interest registrations, and other communications or activities managed by 4T Arrows.

Where a separately operated initiative or service has its own privacy notice, that notice may also apply.

03 Personal Information We Collect

Depending on how you interact with us, we may collect:

• Your name and contact details, including email address and telephone number.
• Your organisation or church name, location and relevant contact information.
• Information you voluntarily provide through enquiries, messages and registration forms.
• Information relating to business, professional or partnership enquiries.
• Technical information such as IP addresses, browser information, device details and website usage data where collected by our website or service providers.

We aim to collect only information reasonably necessary for a specified, legitimate purpose.

04 How We Use Your Information

We may use personal information to:

• Respond to enquiries and requests for information.
• Communicate with prospective customers, churches, partners and stakeholders.
• Manage registrations of interest in our initiatives, including 4T Arrows CMP.
• Discuss potential products, services, partnerships and business relationships.
• Administer, maintain and improve our website and communications.
• Protect systems, prevent misuse and maintain website security.
• Fulfil applicable legal, regulatory, contractual and administrative obligations.

We will not automatically treat a general enquiry or CMP interest registration as consent to receive unrelated promotional messages.

Where we offer optional marketing communications, we will provide an appropriate choice and comply with applicable requirements.

05 How We Collect Information

We collect personal information primarily when you provide it directly to us, including when you complete a form, send an email, request information or contact our team.

Some technical information may be collected automatically when you use our website, including through cookies, security services and website functionality.

Where information is obtained from another source, we will process it only where there is an appropriate lawful basis and provide the necessary notice.

06 Lawful Processing

Depending on the circumstances, processing may be necessary to respond to requests, take steps towards a business relationship, fulfil contractual or legal obligations, pursue lawful legitimate interests, or act on valid consent.

We will consider the appropriate legal basis for each processing activity and will not rely on consent where another lawful basis is more appropriate.

Where information is necessary to respond to your enquiry, required form fields will be identified. Optional information may be left blank.

If you do not provide essential contact details, we may be unable to respond to your request.

07 Sharing Personal Information

We do not sell personal information.

We may share limited personal information with service providers assisting us in operating our website, hosting systems, processing form submissions, managing email communications, maintaining security or delivering services.

Such providers should receive access only where reasonably necessary for their functions and be subject to appropriate confidentiality, security and contractual safeguards.

We may also disclose information where required by law, permitted by POPIA, or necessary to establish, exercise or defend legal rights.

08 International Transfers

Some technology and communication service providers may process or store information outside South Africa.

Where personal information is transferred internationally, we will take steps to ensure that the transfer is permitted under POPIA and that appropriate protections apply.

Information about relevant international processing arrangements may be requested using the contact details below.

09 Cookies and Website Technologies

Our website may use cookies or similar technologies to support essential functionality, security, user preferences and, where implemented, website performance or analytics.

Certain website features and embedded third-party content may also use cookies.

Where required, we will provide appropriate information and choices through our cookie-consent facilities.

You may also manage cookies through your browser settings. Disabling certain cookies may affect website functionality.

10 Information Security

We take the protection of personal information seriously and aim to implement appropriate technical and organisational safeguards against unauthorised access, loss, misuse, alteration or disclosure.

Access to personal information should be limited to authorised individuals and service providers who have a legitimate need to use it.

No internet-based system can be guaranteed completely secure. Where a personal-information security compromise occurs, we will assess and respond to it in accordance with applicable legal requirements.

11 How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to lawful retention requirements.

Enquiry and registration information may be retained while communication is ongoing, while a potential business relationship remains relevant, or for a further period justified by legitimate administrative or legal needs.

When information is no longer required, we will take appropriate steps to delete, destroy or de-identify it, unless continued retention is permitted or required by law.

12 Your Privacy Rights

Subject to applicable law, you may have the right to:

• Request confirmation of whether we hold your personal information.
• Request access to personal information held about you.
• Request correction, updating or deletion of inaccurate or unlawfully retained information.
• Object to certain processing activities.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with South Africa’s Information Regulator.

To exercise your rights, please contact us using the details below. We may need to verify your identity before responding.

13 Children’s and Sensitive Personal Information

Our general website enquiry forms are not intended to collect detailed personal information about children or sensitive categories of personal information.

Where an initiative or service requires such information, additional notices, permissions and safeguards may be necessary.

We will handle special personal information and children’s information in accordance with applicable legal requirements.

14 4T Arrows CMP

4T Arrows CMP is a Church Management & Discipleship Platform under development.

Information submitted through a CMP interest form is used to evaluate and respond to enquiries concerning potential engagement with the platform.

This general website policy does not, by itself, govern the handling of church membership records or other information that may be processed within future customer deployments of CMP.

Where applicable, those arrangements will be addressed through appropriate service terms, privacy information and data-processing agreements.

15 Privacy Contact Details

You may contact 4T Arrows regarding personal information, privacy questions, access requests and related concerns.

16 Complaints

If you believe your personal information has been processed unlawfully, we encourage you to contact us so that we can investigate your concern.

You also have the right to contact the Information Regulator (South Africa).

• Website: inforegulator.org.za
• General email: enquiries@inforegulator.org.za
• POPIA complaints: POPIAComplaints@inforegulator.org.za
• Telephone: 010 023 5200

17 Changes to This Policy

We may update this Privacy Policy to reflect changes in our operations, services, technology or applicable legal requirements.

The latest version will be published on this page with its updated revision date.

Where changes materially affect how personal information is processed, we will provide additional notice where required.