Privacy Policy
Last Updated: 1 November 2025
TradeJournal.co.za is committed to protecting your privacy and ensuring the security of your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African laws.
Introduction
This Privacy Policy explains how Tapnet (Pty) Ltd, trading as TradeJournal ("we," "us," "our," or "TradeJournal"), collects, uses, discloses, and protects your personal information when you use our trading journal platform and services.
Company Details:
- Legal Entity: Tapnet (Pty) Ltd
- Trading Name: TradeJournal
- Website: https://tradejournal.co.za
- Information Officer: [Contact details to be inserted]
- Registered Address: [Physical address to be inserted]
Information We Collect
Personal Information
We collect the following personal information:
- Account Information: Name, email address, password (encrypted), and profile details
- Contact Information: Email address, phone number (if provided)
- Identification Information: South African ID number (if required for verification)
- Payment Information: Billing details, payment method information (processed securely through third-party payment processors)
Trading Data
Information you provide when using our journaling services:
- Trade logs (entry/exit prices, position sizes, profits/losses)
- Trading strategies and notes
- Performance metrics and analytics
- Screenshots and images you upload
- Tags, comments, and custom fields
Technical Information
- IP address and device information
- Browser type and version
- Operating system
- Usage data and analytics
- Cookies and similar technologies (see our Cookie Policy)
How We Use Your Information
We process your personal information for the following lawful purposes under POPIA:
Service Delivery (Contractual Performance)
- Provide access to our trading journal platform
- Store and process your trade data
- Generate performance analytics and reports
- Provide customer support
- Process payments and manage subscriptions
Legitimate Interests
- Improve and optimize our services
- Detect and prevent fraud or abuse
- Maintain platform security
- Conduct data analytics for business improvement
Legal Compliance
- Comply with POPIA and other applicable laws
- Respond to legal requests and prevent illegal activity
- Enforce our Terms of Service
With Your Consent
- Send marketing communications (you can opt-out anytime)
- Use cookies for analytics and personalization
- Share information with third parties beyond service provision
Information Sharing and Disclosure
We do not sell your personal information. We may share your information with:
Service Providers
- Cloud hosting providers (for data storage)
- Payment processors (for subscription management)
- Email service providers (for communications)
- Analytics providers (for usage statistics)
All service providers are contractually bound to protect your data and use it only for specified purposes.
Legal Requirements
We may disclose information if required by:
- Court orders or legal processes
- South African regulatory authorities (e.g., FSCA, Information Regulator)
- Law enforcement agencies
- Protection of rights, property, or safety
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity. You will be notified of any such change.
Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption: Data is encrypted in transit (SSL/TLS) and at rest
- Access Controls: Strict authentication and authorization protocols
- Secure Hosting: Data stored with reputable cloud providers with SOC 2 compliance
- Regular Security Audits: Ongoing monitoring and vulnerability assessments
- Employee Training: Staff trained on data protection and confidentiality
- Incident Response: Procedures in place for breach notification as required by POPIA
While we use industry-standard security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continuously work to protect your data.
Your Rights Under POPIA
Under South Africa's Protection of Personal Information Act, you have the following rights:
Right to Access
Request confirmation of what personal information we hold about you and receive a copy.
Right to Correction
Request correction or updating of inaccurate or incomplete personal information.
Right to Deletion
Request deletion of your personal information (subject to legal retention requirements).
Right to Object
Object to the processing of your personal information for certain purposes (e.g., direct marketing).
Right to Restrict Processing
Request limitation on how we process your information in certain circumstances.
Right to Data Portability
Receive your personal information in a structured, commonly used format.
Right to Lodge a Complaint
File a complaint with the Information Regulator (South Africa) if you believe your rights have been violated.
To Exercise Your Rights:
Contact our Information Officer at: privacy@tradejournal.co.za
We will respond to your request within 30 days as required by POPIA.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
- Active Accounts: Data retained while your account is active
- Closed Accounts: Personal information deleted within 90 days of account closure (unless legal retention required)
- Trading Data: Anonymized after account closure for statistical purposes
- Financial Records: Retained for 5 years as required by South African tax law
- Legal Compliance: Information retained longer if required by law or for legal proceedings
International Data Transfers
Some of our service providers may be located outside South Africa. When we transfer personal information internationally, we ensure appropriate safeguards are in place as required by POPIA Chapter 9:
- Standard contractual clauses
- Adequacy determinations by the Information Regulator
- Data processing agreements with strict security requirements
- Your explicit consent where required
We primarily use service providers with data centers in South Africa or countries with adequate data protection laws.
Children's Privacy
TradeJournal is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you are under 18, please do not use our services or provide any personal information.
If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information immediately.
Parents or guardians who believe we may have collected information from a child should contact us at privacy@tradejournal.co.za.
Contact Us
For questions about this Privacy Policy or our data practices:
Tapnet (Pty) Ltd (Trading as TradeJournal)
Information Officer: [Name]
Email: privacy@tradejournal.co.za
Physical Address: [Insert registered address]
Filing a Complaint with the Regulator:
If you are not satisfied with our response, you may lodge a complaint with:
The Information Regulator (South Africa)
Email: inforeg@justice.gov.za
Website: www.justice.gov.za/inforeg
Physical Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you via email or prominent notice on our platform
- Request your consent if required by law
Your continued use of TradeJournal after changes are posted constitutes acceptance of the updated Privacy Policy.