1. Who We Are
Comtech Internet Services CC — Responsible Party under POPIA
Email: admin@timetap.co.za
Website: https://timetap.co.za
Where an Organisation uses TimeTap to process the personal data of its employees, the Organisation is the Responsible Party and Comtech Internet Services CC acts as the Operator (processor) on its behalf.
2. What Personal Information We Collect
From Organisation Owners
- Name, email address, phone number
- Company name, registration number, VAT number, billing address
- Payment method details — processed and stored by PayStack, never by us
From Employees (collected by the Organisation Owner)
- First name, last name, phone number, email address
- ID number, date of birth, gender, nationality (HR profile)
- Banking details (for payroll processing)
- GPS location at time of clock-in/out
- Clock-in photos (if enabled by the Organisation)
- Leave records, shift assignments, payroll data
- Survey responses and task completions
- Uploaded documents (ID copies, licences, certificates)
Automatically collected
- IP address, device type, browser type
- Usage logs and audit trails for security
- Cookies — see Section 8
3. Why We Collect This Information
- To provide and maintain the TimeTap service
- To process subscription payments and issue invoices
- To enable attendance tracking, payroll, surveys, and task management
- To send transactional notifications (clock-in alerts, payslips) via WhatsApp or email
- To comply with South African legal obligations (SARS, POPIA)
- To improve the platform through anonymised usage analytics
4. Legal Basis for Processing
Contract
To fulfil our service agreement with you.
Legal obligation
To comply with SARS, labour law, and statutory requirements.
Legitimate interest
For platform security, fraud prevention, and service improvement.
Consent
For optional analytics cookies and marketing — you may withdraw at any time.
5. How We Store & Protect Your Information
All data is stored on Supabase infrastructure with encryption in transit (TLS) and at rest. Access is restricted by role-based controls and we conduct regular security reviews.
Employee documents and photos are stored in access-controlled cloud storage. Clock-in photos are linked only to the relevant employee and Organisation and are not accessible to anyone outside that Organisation.
7. Your Rights Under POPIA
You have the right to:
- ✓Access the personal information we hold about you
- ✓Correct inaccurate or outdated information
- ✓Object to the processing of your information
- ✓Request deletion of your personal information (subject to retention obligations)
- ✓Lodge a complaint with the Information Regulator of South Africa
9. Data Retention
Active account data
Duration of subscription
Operational data
Deleted within 30 days of account deletion
Billing & payment records
5 years (SARS requirement)
Audit logs
2 years (security & disputes)
10. Children
TimeTap is not intended for persons under 18. We do not knowingly collect personal information from children. If you believe a child's data has been submitted, contact us immediately to have it removed.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by email or in-app notification at least 14 days before they take effect. The current version is always available at https://timetap.co.za/privacy.