Legal
Privacy & Cookie Policy
Last updated 16 June 2026
This policy explains how Cybr Physical Solutions (Pty) Ltd("we", "us", "Penny") handles personal information collected through our website www.mypenny.co.za(the "Website"), in line with the Protection of Personal Information Act, 2013 (POPIA).
It covers the Website only. It does notcover the data you manage inside the Penny application itself — Penny runs locally on your own computer, and your students', families' and financial records stay on your machine, under your control, not on our servers.
1. Who is responsible
Cybr Physical Solutions (Pty) Ltd is the responsible party for personal information processed through the Website.
- Information Officer: Herman
- Email: herman@cybr-physical.com
- WhatsApp: +27 81 657 3386
2. What we collect and why
- When you use the enquiry form — your first name, company name, email address, subject and message. We use this only to read and respond to your enquiry. The form builds a message that opens in WhatsApp so you can send it to us.
- When you contact us on WhatsApp— WhatsApp shares your phone number and profile details with us, governed by WhatsApp's own privacy terms.
- Analytics (only with your consent) — if you accept analytics cookies, Google Analytics 4 collects pseudonymous information about your visit (pages viewed, device and browser type, approximate location derived from your IP address, and a randomly generated cookie identifier). We use this to understand how the Website is used and to improve it. We do not use it to identify you personally.
- Your cookie choice— we store your accept/decline choice in your browser's local storage so we don't ask again. This is essential to the Website and does not require consent.
3. Cookies and similar technologies
- Essential — stores your cookie-consent choice (local storage). Always active; needed for the site to remember your preference.
- Analytics — Google Analytics cookies. Off by default.We use Google Consent Mode, which keeps analytics storage "denied" until you click Accepton our cookie banner. If you choose "Essentials only", no analytics cookies are set.
You can withdraw consent at any time by clearing this site's data in your browser, which will show the banner again.
4. Lawful basis (POPIA)
- We process enquiry details on the basis of your request and our legitimate interest in responding to you.
- We process analytics data on the basis of your consent, which you can withdraw at any time.
5. Who we share information with
We don't sell your personal information. We share limited information with service providers who help us run the Website:
- Google (Google Analytics) — website analytics, if you consent.
- Meta Platforms / WhatsApp — if you choose to contact us via WhatsApp.
- Vercel — website hosting and delivery.
Each processes data under its own terms and security measures.
6. Information processed outside South Africa
Some of these providers (Google, Meta, Vercel) process information on servers outside South Africa. Where this happens, the transfer is subject to those providers' safeguards and to the conditions for cross-border transfers under section 72 of POPIA.
7. How long we keep it
We keep enquiry and contact details only as long as needed to deal with your enquiry, and in any event no longer than 24 months after our last contact with you, after which we delete them. Analytics data is retained according to our Google Analytics settings.
8. Your rights under POPIA
You have the right to:
- ask what personal information we hold about you and request a copy;
- ask us to correct or delete it;
- object to processing, and withdraw consent to analytics at any time;
- not have your information processed unlawfully.
To exercise any of these, email herman@cybr-physical.com.
You also have the right to complain to the regulator:
The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: POPIAComplaints@inforegulator.org.za
Website: inforegulator.org.za (please check the website for the latest contact details)
9. Security
We take reasonable technical and organisational steps to protect the information we hold against loss, unauthorised access and misuse. No website can be guaranteed completely secure, but we work to keep what little we collect safe.
10. Children
The Website is aimed at tutoring businesses and their owners, not at children. We do not knowingly collect personal information from children through the Website.
11. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows the latest version.