Introduction
Widget Factory (Pty) Ltd ("we", "us", "our") is committed to protecting the personal information of our website visitors and service users ("you") in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA").
This policy sets out how we collect, use, and protect your personal information when we act as a responsible party in respect of South African data subjects. It should be read together with our Privacy Policy, which describes our general data practices in full.
Responsible Party
Widget Factory (Pty) Ltd
The Foundry
74 Cardiff Street
Green Point
Cape Town
8005
South Africa
Information Regulator Registration Number: 2026-003165
Information Officer
We have appointed an Information Officer as required by POPIA. You may contact our Information Officer for any privacy-related queries or requests:
Email:
What Information We Collect
We collect the minimum amount of personal information necessary to provide our services:
- Identity data: your name, email address, and username.
- Subscription records: subscription keys, subscription status, and order reference (including Paddle transaction ID), generated and stored by us to manage your access to JCE Pro.
Site security and performance data (including IP addresses) is processed by Cloudflare. Anonymised traffic analytics are collected by Plausible Analytics, which does not use cookies and does not track individuals. We do not store this data ourselves.
We do not collect special personal information (such as health, race, religion, or biometric data).
Lawful Basis for Processing
We process your personal information on the following grounds:
- With your consent, where required.
- Where necessary to perform a contract with you, such as providing access to JCE Pro and other site services.
- Where necessary to comply with a legal obligation.
- Where necessary for our legitimate business interests, provided these are not overridden by your rights and interests.
Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:
- Subscription records: retained for the duration of your subscription and indefinitely thereafter, unless you request deletion.
- Marketing data: retained until you withdraw consent or unsubscribe.
- Support correspondence: retained indefinitely, unless you request deletion.
IP addresses processed by Cloudflare are subject to Cloudflare’s own retention policy. We do not retain these ourselves.
You may request deletion of your personal information at any time using our Data Request form or this contact form.
Special Personal Information
We do not knowingly collect or process special personal information. Our services are not directed at children under 18 years of age, and we do not knowingly collect personal information from children.
Sharing Your Information
We do not sell or rent your personal information. We may share it with third-party service providers who assist us in operating our website and services. These parties are required to handle your information securely and in accordance with applicable law. Further detail on the third parties we work with is available in our Privacy Policy.
We may also disclose your information where required by law or to protect our legal rights.
International Transfers
Some of our service providers are located outside South Africa, including in the EU and USA. Where we transfer your personal information internationally, we take steps to ensure it receives an equivalent level of protection, including through contractual safeguards such as Standard Contractual Clauses. The specific providers and countries involved are listed in our Privacy Policy.
Automated Decision-Making
When you purchase a product from us, we use a service provided by our reseller Paddle to display the purchase price in your currency (where available). This service may use your IP address to determine your location.
We use your IP address to determine which country you are in, so as to show you the appropriate contact information and in the associated contact form.
We do not store or use this data for any other purpose.
Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. In the event of a security compromise that may affect you, we will notify the Information Regulator and, where required, affected data subjects as soon as reasonably possible.
Your Rights
As a data subject under POPIA, you have the right to:
- Request confirmation of whether we hold personal information about you.
- Request access to your personal information.
- Request correction or deletion of inaccurate or outdated information.
- Object to the processing of your personal information.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with the Information Regulator.
To exercise any of these rights, please use our Data Request form or this contact form, or contact our Information Officer at
Information Regulator
If you believe we have not handled your personal information in accordance with POPIA, you may lodge a complaint with the Information Regulator:
Information Regulator (South Africa)
Woodmead North Office Park
54 Maxwell Dr
Woodmead
Johannesburg
2191
Email:
Website: www.inforegulator.org.za
Direct Marketing
We will only send you marketing communications where you have consented to receive them, or where we have an existing relationship and the communication relates to similar products or services. Every marketing email includes an unsubscribe link. You may also opt out at any time by contacting us at
Contact Us
If you have any questions about this policy or how we handle your personal information, please send us an email or write to us:
Widget Factory (Pty) Ltd
The Foundry
74 Cardiff Street
Green Point
Cape Town
8005
South Africa