Responsible Party: For the purposes of POPIA, the responsible party for your personal information is Cubedeals (Pty) Ltd, operating the Cubedeals platform at cubetech.online/cubedeals.html.
Information Officer: Cubedeals has appointed an Information Officer as required by POPIA. All privacy-related queries, data access requests, and complaints should be directed to:
- 📧 Information Officer: lglsupport@cubetech.online
- 📧 General Support: cdsupport@cubetech.online
- 🌐 Website: cubetech.online/cubedeals.html
This Privacy Policy applies to all personal information collected through the Cubedeals website, any associated mobile-optimised pages, email communications, and any other interactions you have with Cubedeals as a platform user.
Cubedeals collects personal information that you provide directly, information generated through your use of the Platform, and in limited cases, information from third parties. The categories of personal information we collect are set out below.
Information you provide to us:
| Category | Examples | When collected |
|---|---|---|
| Account information | Full name, email address, password (hashed) | On registration |
| Contact details | Email address, phone number | Registration / support queries |
| Purchase information | Order history, Voucher codes, deal selections | When you buy a deal |
| Payment information | Last 4 digits of card (for reference only); full card data processed by PayFast — never stored by Cubedeals | At checkout |
| Communications | Emails, support messages, feedback you send us | When you contact us |
| Preferences | Marketing opt-ins/outs, deal category interests | Account settings / sign-up |
Information collected automatically:
| Category | Examples | Purpose |
|---|---|---|
| Device & browser data | IP address, browser type and version, operating system, device type | Security, fraud prevention, analytics |
| Usage data | Pages visited, deals viewed, clicks, session duration, referring URL | Platform improvement, personalisation |
| Cookies & similar technologies | Session cookies, persistent cookies, analytics identifiers | See Section 6 |
| Transaction logs | Purchase timestamps, payment status, Voucher issuance records | Order fulfilment, dispute resolution |
Information from third parties: We may receive limited personal information from PayFast (our payment processor) confirming successful payment, and from email service providers confirming delivery of your Voucher. We do not purchase or receive personal data from data brokers or unrelated third parties.
Cubedeals uses your personal information only for the purposes described below. We do not use your personal information for any purpose incompatible with the reason it was collected without first obtaining your consent.
| Purpose | Information used | Legal basis |
|---|---|---|
| Creating and managing your account | Name, email, password | Contract performance |
| Processing your purchase and issuing your Voucher | Account info, payment confirmation, order details | Contract performance |
| Sharing redemption details with the Merchant | Name, contact info, Voucher reference | Contract performance |
| Sending transactional emails (order confirmations, Vouchers, refund notifications) | Email address, order details | Contract performance |
| Responding to support queries and resolving disputes | Contact details, order history, communications | Contract performance / legitimate interest |
| Fraud detection and prevention | IP address, device data, payment behaviour, transaction logs | Legitimate interest / legal obligation |
| Improving and personalising the Platform | Usage data, browsing behaviour, deal preferences | Legitimate interest |
| Sending marketing emails about deals and promotions | Email address, deal preferences | Consent (opt-in) |
| Complying with legal obligations (tax, consumer law, court orders) | As required | Legal obligation |
| Analytics and platform performance monitoring | Anonymised or aggregated usage data | Legitimate interest |
Cubedeals does not sell, rent, or trade your personal information to any third party for their own marketing purposes.
Under POPIA, Cubedeals must have a lawful basis for processing your personal information. We rely on the following grounds:
- Contract performance: Processing necessary to fulfil your purchase, manage your account, and deliver your Voucher.
- Legal obligation: Processing required to comply with applicable South African law, including the CPA, tax legislation, and any lawful court order or regulatory requirement.
- Legitimate interest: Processing for fraud prevention, platform security, customer support, and analytics, where those interests are not overridden by your right to privacy. We conduct a balancing assessment before relying on this ground.
- Consent: Processing for marketing communications, where you have specifically opted in. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Where we rely on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal. To withdraw consent, use the unsubscribe link in any marketing email or contact lglsupport@cubetech.online.
Cubedeals shares your personal information only in the limited circumstances described below. We do not share your personal information more broadly than is necessary for the stated purpose.
Merchants: When you purchase a Voucher, we share your name, contact information, and Voucher reference with the relevant Merchant solely to enable redemption. We do not share your payment details, full order history, or any other personal information with Merchants beyond what is necessary for this purpose. Merchants are required to handle your personal information in accordance with POPIA and their own privacy obligations.
Service providers (operators): We engage trusted third-party service providers to assist us in operating the Platform. These include:
| Provider type | Purpose | Data shared |
|---|---|---|
| PayFast | Payment processing | Payment details (processed directly; Cubedeals receives confirmation only) |
| Email service provider | Transactional and marketing email delivery | Email address, name, order reference |
| Web hosting / cloud provider | Platform hosting and data storage | All platform data, stored securely |
| Analytics provider | Platform usage analytics | Anonymised / aggregated usage data |
All service providers are required to process your personal information only on Cubedeals' instructions and to implement appropriate security measures. They may not use your information for their own purposes.
Legal disclosures: Cubedeals may disclose your personal information if required to do so by law, court order, or competent regulatory authority, or where we believe disclosure is necessary to protect the rights, property, or safety of Cubedeals, its users, or the public.
Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of Cubedeals' business, your personal information may be transferred to the acquiring entity, provided that the acquiring entity is bound by obligations no less protective than those in this Privacy Policy.
The Cubedeals Platform uses cookies and similar tracking technologies to provide essential functionality, remember your preferences, and help us understand how users interact with the Platform. A cookie is a small text file placed on your device by your browser when you visit a website.
We use the following categories of cookies:
| Type | Purpose | Can be disabled? |
|---|---|---|
| Strictly necessary | Essential for the Platform to function — session management, secure login, shopping cart | No — disabling will break core functionality |
| Functional | Remember your preferences (e.g. language, region) to personalise your experience | Yes, via browser settings |
| Analytics | Track how users navigate the Platform to help us improve it (e.g. Google Analytics or equivalent, with IP anonymisation enabled) | Yes, via browser settings or opt-out tools |
| Marketing / remarketing | Used only where you have consented to receive targeted deal communications | Yes — withdraw consent at any time |
You may manage or disable cookies through your browser settings at any time. Please note that disabling cookies beyond the strictly necessary category may affect the functionality and your experience of the Platform. Instructions for managing cookies are available through your browser's help documentation.
The Platform may include links to third-party websites (for example, Merchant websites). Cubedeals is not responsible for the privacy practices or cookie policies of any third-party website. We recommend reviewing the privacy policy of any external site you visit.
Cubedeals retains your personal information only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:
| Data category | Retention period | Reason |
|---|---|---|
| Account information | Duration of account + 3 years after closure | Dispute resolution, legal compliance |
| Purchase and Voucher records | 5 years from date of purchase | Tax obligations, CPA compliance, dispute resolution |
| Payment confirmation records | 5 years | Financial records, tax obligations |
| Support communications | 3 years from resolution | Dispute resolution, service improvement |
| Marketing preferences | Until opt-out + 1 year | Proof of consent / withdrawal |
| Analytics data (anonymised) | Up to 26 months (rolling) | Platform analytics and improvement |
| Fraud and security logs | 3 years | Fraud prevention, legal proceedings |
After the applicable retention period, personal information is securely deleted or anonymised so that it can no longer be linked to you. Where deletion is not technically feasible in the short term (for example, in backup archives), the information will be isolated and protected from further processing until deletion is possible.
In some circumstances, we may retain personal information for longer periods where required to do so by law (for example, in connection with litigation, a regulatory investigation, or a tax audit).
Cubedeals implements appropriate technical and organisational measures to protect your personal information against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- HTTPS encryption for all data transmitted between your browser and the Platform;
- Hashed (not plaintext) storage of account passwords;
- PCI-DSS compliant payment processing through PayFast — Cubedeals does not store full card numbers;
- Access controls limiting access to personal information to authorised personnel on a need-to-know basis;
- Regular review of our security practices and procedures.
Despite our efforts, no method of transmission over the internet or electronic storage is completely secure. Cubedeals cannot guarantee absolute security of your personal information but commits to notifying affected users and the Information Regulator promptly in the event of a data breach that is likely to result in harm, as required by section 22 of POPIA.
You play an important role in keeping your information secure. Please use a strong, unique password for your Cubedeals account, do not share your login credentials, and contact us immediately at cdsupport@cubetech.online if you believe your account has been compromised.
POPIA grants you the following rights in respect of the personal information Cubedeals holds about you. You may exercise any of these rights by contacting our Information Officer at lglsupport@cubetech.online.
Request a copy of the personal information Cubedeals holds about you, and information about how it is used.
Request that inaccurate, incomplete, or out-of-date personal information be corrected or updated.
Request deletion of your personal information where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
Object to the processing of your personal information for direct marketing purposes or where we rely on legitimate interest as the basis for processing.
Withdraw consent for any processing based on consent (such as marketing emails) at any time, without penalty.
Lodge a complaint with the Information Regulator of South Africa if you believe your personal information has been processed unlawfully.
To exercise any of the above rights, please email lglsupport@cubetech.online with the subject line "POPIA Rights Request" and include your full name, registered email address, and a description of the right you wish to exercise. We will respond within 30 days of receiving your request, as required by POPIA.
We may need to verify your identity before processing a rights request. This is to protect your personal information and ensure we do not disclose it to, or act on instructions from, an unauthorised person.
Information Regulator of South Africa: If you are not satisfied with how Cubedeals has handled your personal information or a rights request, you may lodge a complaint with the Information Regulator at www.justice.gov.za/inforeg or by email at inforeg@justice.gov.za.
Cubedeals will only send you marketing emails, SMS messages, or push notifications about deals and promotions if you have explicitly opted in to receive them. We rely on your consent — not legitimate interest — for direct marketing communications, in line with POPIA and the CPA.
You may opt out of marketing communications at any time by:
- Clicking the unsubscribe link in any marketing email we send you;
- Updating your communication preferences in your Cubedeals account settings; or
- Emailing cdsupport@cubetech.online with the subject line "Unsubscribe".
Opt-out requests will be actioned within 5 business days. Opting out of marketing will not affect transactional communications such as order confirmations, Voucher delivery emails, and refund notifications — these are necessary for the fulfilment of your purchases.
We do not send unsolicited SMS messages or make unsolicited marketing calls. If you receive a communication purportedly from Cubedeals that you did not consent to, please report it to cdsupport@cubetech.online.
The Cubedeals Platform is not directed at, and is not intended for use by, persons under the age of 18 years. Cubedeals does not knowingly collect personal information from minors.
If you believe that a minor has provided us with personal information without appropriate consent, please contact our Information Officer at lglsupport@cubetech.online immediately. We will take steps to delete the information promptly upon verification.
POPIA imposes strict requirements on the processing of personal information of children. Should Cubedeals ever need to process personal information of a minor in any context, we will obtain the required prior consent from a competent person (as defined in POPIA) and will comply with all applicable conditions for such processing.
Cubedeals operates primarily within the Republic of South Africa and processes most personal information on servers located in South Africa. In certain instances, we may use service providers whose infrastructure is hosted in other countries (for example, cloud hosting or email delivery services with servers outside South Africa).
Where personal information is transferred to a third country, Cubedeals ensures that the transfer complies with section 72 of POPIA. This means we will only transfer personal information to a foreign country if:
- The recipient country has laws that adequately protect the processing of personal information to a standard substantially similar to POPIA; or
- We have binding contractual obligations in place with the recipient that require them to protect your personal information to an equivalent standard; or
- You have consented to the transfer.
For questions about where your data is stored or processed, or to obtain details of the safeguards in place for cross-border transfers, please contact lglsupport@cubetech.online.
Cubedeals may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we provide. Any updates will be published on this page with a revised "Last updated" date at the top of the policy.
Where changes are material — for example, a significant change in how we use your personal information or a new category of third-party sharing — we will notify you by email to the address registered on your account at least 14 days before the change takes effect.
Your continued use of the Platform after the effective date of any update constitutes your acknowledgement of the revised policy. If you do not agree with the changes, you should stop using the Platform and may close your account by contacting cdsupport@cubetech.online.
For all privacy-related queries, data access requests, or concerns about how Cubedeals processes your personal information, please contact our Information Officer directly. We commit to acknowledging your query within 2 business days and providing a substantive response within 30 days.
Contact details:
- 📧 Information Officer (Privacy & POPIA): lglsupport@cubetech.online
- 📧 General Customer Support: cdsupport@cubetech.online
- 🌐 Website: cubetech.online/cubedeals.html
If you are not satisfied with our response, or if you believe your personal information has been processed in violation of POPIA, you have the right to lodge a complaint with the Information Regulator of South Africa:
- 🌐 www.justice.gov.za/inforeg
- 📧 inforeg@justice.gov.za
- 📧 Complaints (specific): complaints.IR@justice.gov.za
This Privacy Policy forms part of the Cubedeals Terms & Conditions and should be read alongside them and our Returns & Refunds Policy.