← Back to CommHub

Privacy Policy

Last updated: 28 April 2026

CommHub (Pty) Ltd (“CommHub”, “we”, “us”, “our”) respects the privacy of every person who visits our website, signs up to our platform, or otherwise shares personal information with us. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the rights you have under the Protection of Personal Information Act 4 of 2013 (“POPIA”).

By using commhub.co.za or the CommHub platform, you confirm that you have read and understood this Privacy Policy.

1. Who we are

CommHub (Pty) Ltd
Registration number: 2026/318433/07
Registered address: Dreyer Street, Claremont, Cape Town, 7708, South Africa
Email: hello@commhub.co.za

CommHub is the responsible party for personal information collected through our public website and marketing channels. Where you use CommHub through a brokerage that subscribes to our platform, that brokerage is the responsible party for the data they upload, and CommHub processes that data as an operator on the brokerage's behalf.

2. Information Officer

In line with POPIA, our designated Information Officer is:
Paul Dando
Email: hello@commhub.co.za

You can contact the Information Officer for any privacy-related question, request, or complaint.

3. What personal information we collect

Information you give us directly

  • Identifying information: full name, work email, contact number, role, company name
  • Account credentials when you sign up for the platform
  • Information you submit through our “Book a demo” or contact forms
  • Communications you send us (email, support requests, sales enquiries)

Information collected automatically

  • IP address and approximate geographic location
  • Browser type, device type, and operating system
  • Pages visited, time spent on pages, referring URLs
  • Cookie identifiers (see section 9 on cookies)

Information uploaded to the CommHub platform by brokerage subscribers

  • Commission statements, policy data, client records, agent records
  • Identifying information of policyholders (name, ID number, contact details, policy numbers)
  • Financial information related to premiums and commission

For platform data, the subscribing brokerage is the responsible party. CommHub processes this data only on the documented instructions of the brokerage in accordance with our service agreement and POPIA.

4. Why we collect personal information

  • To provide, operate and improve the CommHub platform
  • To respond to enquiries and demo requests
  • To communicate with you about your account, billing, and platform updates
  • To send marketing communications where you have consented to receive them
  • To comply with our legal and regulatory obligations
  • To prevent fraud, abuse, and unauthorised access to our systems
  • To produce aggregated, anonymised analytics that do not identify any individual

5. Lawful basis for processing

  • The data subject's consent
  • Necessary for the performance of a contract with the data subject
  • Compliance with a legal obligation
  • Protecting a legitimate interest of the data subject
  • Pursuit of CommHub's legitimate interests, balanced against the rights of the data subject

6. Who we share information with

We do not sell personal information. We may share personal information with:

  • Service providers who help us run our business (cloud hosting, email, analytics, payment processing, customer support tooling). These providers are contractually bound to process information only as instructed by us and to protect it appropriately.
  • Professional advisors (lawyers, accountants, auditors) where required.
  • Regulators, courts, or law enforcement where we are legally required to disclose information.
  • A successor entity in the event of a merger, acquisition, or sale of business assets, subject to appropriate confidentiality undertakings.

We do not transfer personal information to a country outside South Africa unless that country provides an adequate level of protection, the transfer is necessary for the conclusion or performance of a contract, or you have consented.

7. How we protect personal information

  • Encryption of personal information in transit (TLS) and at rest
  • Role-based access controls and the principle of least privilege
  • Row-level security so that no brokerage's data is visible to another brokerage
  • Regular security reviews, vulnerability scanning, and software patching
  • Employee training on privacy and security
  • Incident response procedures, including breach notification

If we become aware of an actual or suspected personal information breach, we will notify the Information Regulator and affected data subjects without undue delay, in line with section 22 of POPIA.

8. How long we keep personal information

  • Account information: for the duration of your account, plus 5 years for legal and tax records
  • Demo enquiries that don't convert: 24 months
  • Marketing contact details: until you opt out
  • Platform data uploaded by brokerages: as instructed by the brokerage, and on termination of their subscription, returned or securely deleted in accordance with our service agreement

9. Cookies and similar technologies

We use cookies and similar technologies to make our website work, to remember your preferences, and to understand how visitors use the site. You can control cookies through your browser settings. Disabling cookies may affect site functionality. We use:

  • Strictly necessary cookies to operate the site (cannot be disabled)
  • Analytics cookies to measure usage and improve the site (you can opt out)
  • Marketing cookies only with your consent

10. Your rights under POPIA

  • To be notified when your personal information is collected
  • To access the personal information we hold about you
  • To request correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or obtained unlawfully
  • To object to the processing of your personal information
  • To object to direct marketing
  • To not be subject to a decision based solely on automated processing
  • To lodge a complaint with the Information Regulator

To exercise any of these rights, contact our Information Officer at hello@commhub.co.za.

11. Direct marketing

We will only send you direct marketing communications if you have given us consent or where you are an existing customer and we are marketing similar services. You can opt out at any time by clicking the unsubscribe link in any marketing email or by emailing hello@commhub.co.za.

12. Children

CommHub is a B2B platform and is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

13. Information Regulator

If you are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the Information Regulator:

The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: complaints.IR@justice.gov.za

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent version. Material changes will be communicated by email or through a prominent notice on the site.

15. Contact us

CommHub (Pty) Ltd
Email: hello@commhub.co.za
Address: Dreyer Street, Claremont, Cape Town, 7708, South Africa
Information Officer: Paul Dando