1. Introduction

This Privacy Policy explains how Thundamental (Pty) Ltd ("we", "our", or "us") collects, uses, stores, and protects personal information obtained through our AI-enabled tools, in accordance with the Protection of Personal Information Act (POPIA).

​

2. Responsible Party & Contact Details

Responsible Party: Thundamental (Pty) Ltd
Registered Address: 150 Beach Road
Telephone: [Insert phone number]

Information Officer: T Verloren van Themaat
Email: info @ thundamental.co.za
Telephone: + 27 824508

​

3. What Information We Collect

​

When you interact with our AI or custom GPT, we may collect:

• Text inputs you provide

• Analysis done based on your inputs

• Metadata (e.g. timestamps, browser type, IP address)

• Technical logs for performance/debugging

• Responses generated by the AI based on your input

We do not intentionally collect sensitive or personally identifying information unless you explicitly include it in your input.

​

4. How We Use Your Information

Your data is used to:

• Generate contextual responses from the AI

• Analyse input

• Capture information and reporting

• Improve and monitor the performance of our services

• Protect our systems from abuse

• Comply with legal obligations

​

5. Legal Grounds for Processing

We process your personal information based on:

• Your explicit consent (by using the service)

• Performance of a contract (e.g. using AI to fulfil a request)

• Legitimate interests, such as improving service delivery

​

6. Sharing of Information

We do not sell or rent your data. Your data may be processed by third-party infrastructure or cloud providers solely for delivering the GPT functionality. These parties adhere to strict data protection obligations.

​

7. International Data Transfers

Some of our processing may occur on servers located outside South Africa. Where applicable, we ensure these transfers comply with POPIA and are protected through contractual safeguards or processing in jurisdictions with adequate protection levels.

 

8. Data Retention

We retain personal data only for as long as necessary to provide our services and for legal compliance. AI conversation logs may be anonymised or deleted within 30 days, unless longer retention is legally required or explicitly consented to.

 

9. Security Measures

We implement appropriate technical and organisational security measures including:

• Encrypted communications (HTTPS)

• Access control to servers

• Regular system audits and monitoring

 

10. Your Rights (POPIA)

You have the right to:

• Access the personal data we hold about you

• Request corrections or deletion

• Object to or restrict processing

• Lodge a complaint with the Information Regulator

T

o exercise these rights, email us at info@ thundamental .co. za. We aim to respond within 30 days.

​

11. Data Breach Notification

If we detect any security breach involving your personal information, we will notify you and the Information Regulator of South Africa as required under POPIA.

 

12. Contacting the Information Regulator

Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg
Email: inforeg@justice.gov.za
Website: www.justice.gov.za/inforeg

 

13. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected on this page and, where appropriate, notified via email or within our GPT tools.