Privacy and POPIA
Last updated 9 October 2026
How KAL collects, uses and protects personal information, in line with South Africa's Protection of Personal Information Act (POPIA). KAL is run by Kaldin Mackrell, who is also KAL's Information Officer.
Who is responsible for what
Your own details (your name, email, cell and how you use KAL): KAL is responsible for these.
Your clients' details (the people you add or import): you, the agent, are responsible for these. KAL looks after them on your behalf and only uses them to run KAL for you. In POPIA terms you are the "responsible party" and KAL is your "operator".
What KAL stores
About you: your name, email, cell, agency name, character, settings and password (stored scrambled, never readable).
About your clients, only what you choose to add: names, cell numbers, emails, birthdays and other special dates, family and interests, their home, notes, your messages and contact history, and whether they agreed to hear from you.
KAL never imports ID numbers or tags like race or gender, even if your file has them. Please don't type them in either.
What KAL does with it
Only what you see in KAL: showing your clients, working out who to contact, special days and your numbers. We don't sell personal information, share it with advertisers, or send messages to your clients ourselves.
Who else is involved
KAL runs on trusted service providers who only store and serve the data for us: Supabase (the database, on servers in London, United Kingdom), our hosting provider (runs the website) and, once payments start, Paystack and PayFast (handle card payments; KAL never sees your card number). The United Kingdom has data protection laws similar to POPIA.
How it's protected
Every agent's clients are locked to that agent: no other agent can see or change them. Connections are encrypted, the database is backed up every day, and nothing you delete is wiped by accident: it goes to a Bin you can restore from.
How long we keep it
While your account is open. If you cancel or your account is paused, we keep your data for 12 months so you can come back, then delete it. You can ask us to delete it sooner.
Your rights
You, and your clients, can ask what personal information KAL holds, ask for it to be corrected or deleted, or object to it being used. Clients should usually ask their agent first; they can also email us. We reply within 30 days.
If you're not happy with how we handled it, you can complain to the Information Regulator: www.inforegulator.org.za.
Cookies
KAL only uses the cookies it needs to keep you logged in. No advertising or tracking cookies.
Contact
Information Officer: Kaldin Mackrell, kaldinmackrell13@gmail.com.