LONNA Privacy Notice
This notice explains how Alpha Bridge Accounting (Pty) Ltd ("Alphabridge") handles personal information in LONNA, in line with the Protection of Personal Information Act, 2013 (POPIA).
1. Who we are
Alpha Bridge Accounting (Pty) Ltd, registration number 2023/916934/07, [physical address]. Information Officer: [name], info@alphabridge.co.za.
2. Two roles
For the information we collect about our customers and their users when they sign up and use LONNA, we are the responsible party.
For the payroll information a customer puts into LONNA about its own employees, the customer is the responsible party and we are its operator. We process that information only for the customer and on its instructions (see the Operator Agreement). An employee who wants to see or correct their information should ask their employer.
3. What we collect and why
Sign-up and account information: company name and registration number, the contact's name, e-mail address and phone number, user names and e-mail addresses, and the password (stored only as a one-way hash). Purpose: to create and run accounts, to contact you, to bill you.
Activity records: sign-in and security events, actions taken in the system and the IP address they came from. Purpose: security, fault finding and proof of who did what.
Payroll information (customers' employee details, salaries, tax and bank details). Purpose: to calculate and report payroll for the customer.
We do not sell personal information and do not use it for marketing to third parties.
4. Who else sees it
Service providers who help us run LONNA, bound to protect it: [hosting provider and location], [e-mail sending provider]. We share information with authorities only where the law requires it.
Our own staff can open a customer's data only with that customer's approval (see the Staff Access Policy).
5. Where it is kept
[Confirm: LONNA's servers and backups are in South Africa.] If information is ever sent outside South Africa we will make sure POPIA section 72 is met.
6. How we protect it
Encrypted connections (HTTPS); passwords stored with Argon2 hashing; optional two-factor sign-in; lock-out after repeated wrong passwords; separation between customers; roles that limit what each user may do; an audit trail of actions; customer approval before our staff can see data; regular backups; secrets such as the mailbox password stored encrypted.
7. How long we keep it
Account information while the account exists and for [5] years afterwards where we need it for tax and accounting records. Payroll information for as long as the customer keeps it with us, then it is returned and deleted as the Operator Agreement says. [Attorney to confirm periods.]
8. Your rights
You may ask us what personal information we hold about you, ask us to correct or delete it, or object to its processing, by writing to info@alphabridge.co.za. For employee payroll information, please ask your employer.
If you are not satisfied, you may complain to the Information Regulator (inforegulator.org.za).
9. Cookies
LONNA uses one cookie, to keep you signed in. It is needed for the service and is not used for tracking or advertising.
10. Changes
We will publish changes to this notice on this page and tell account owners of important changes.