01
Purpose and scope
This draft explains how personal information may be processed when people visit the Deadline Monitor website, make an enquiry, or use the business monitoring application. It is for review and is not final legal advice or a final privacy commitment.
Deadline Monitor is a software-enabled business monitoring application. Version 1 does not store clients' underlying confidential company documents.
02
Who we are
Deadline Monitor is the service and trading name. The legal entity is pending CIPC registration and no registration number is available for publication.
The current contact email is consultant1@compimento.co.za. It is a temporary contact address; a dedicated @deadlinemonitor.co.za address is not configured.
03
POPIA roles
The roles of the client organisation and the entity that will operate Deadline Monitor depend on the processing activity and must be confirmed in the applicable agreement after legal review. A client may determine the purpose and means of processing for its organisation; a service provider may process information on documented instructions.
The final legal entity and the Information Officer have not been confirmed. This draft does not make a final determination of any party's legal role.
04
Personal information collected
Depending on how the service is used, information may include:
- Business and organisation details, including business contact information.
- Account, workspace, role and organisation-membership information for authorised people.
- Monitored company-record metadata, including categories, issue and expiry dates, status, risk, responsible contacts and follow-up dates.
- Reminder, calendar, reporting and audit-history information associated with application activity.
- Information entered into legacy operational areas, which may remain in browser localStorage.
- Technical and security information needed to authenticate users, authorize access and operate the service.
05
Information excluded from Version 1
Do not upload or enter the following into the application or enquiry:
- Underlying confidential company documents or document files.
- Full identity numbers, bank statements, tax returns or confidential document contents.
- Passwords, authentication codes, SARS or CIPC credentials, or other third-party login credentials.
- Unnecessary special personal information.
06
Collection methods
Information may be provided by an organisation or its authorised users through the application or through direct contact. The public enquiry form opens a prefilled email; the website does not independently transmit or store that enquiry.
Authentication, workspace and application activity may also produce technical or audit information. Final provider-specific collection details remain subject to the provider register and legal review.
07
Purposes for processing
Information may be used to respond to enquiries, provide access to the application, manage organisation workspaces, monitor approved record metadata and dates, support reminders and follow-ups, produce reports and audit history, protect the service, and meet applicable legal obligations.
08
Lawful grounds
The appropriate lawful ground must be determined for each processing purpose and documented by the responsible party or operator as applicable. This draft does not assert that a particular ground applies to every activity; legal review is pending.
09
Special personal information and children
The service is intended for business use and is not intended to collect children's information or special personal information. Do not submit such information unless a separately reviewed lawful requirement and approved feature expressly allow it.
12
Cross-border processing
Provider locations, international access and any applicable cross-border safeguards have not been fully confirmed. A provider and transborder-processing assessment must be completed before production processing.
13
Security safeguards
Supabase authentication, workspace roles and organisation memberships, authenticated server access checks and row-level security (RLS) for shared Supabase data are implemented. Monitored-record create, read, update and delete operations and their history have been migrated and locally verified.
Some legacy operational domains still use browser localStorage. Recurring-task migration has an approved design but is not implemented. Production database deployment, production configuration and a final security-readiness assessment remain pending. These facts do not amount to a certification or guarantee.
14
Retention and deletion
Information should be retained only as long as needed for its documented purpose and applicable legal obligations. Final retention periods, export arrangements, deletion procedures and backup handling have not been approved or configured in this draft.
15
Data-subject rights
Individuals may have rights under applicable law to request access to, correction of or deletion of personal information, or to raise an objection, subject to the law and circumstances. A request involving information processed for a client may need to be handled with that client.
16
Privacy-request process
Send a privacy question or request to consultant1@compimento.co.za or call 073 501 9603. Requests will be directed to the appropriate responsible party or authorised contact. The final verification, response and escalation procedure remains to be documented.
17
Direct marketing
This draft does not establish a direct-marketing programme. Any direct marketing must be reviewed for a lawful basis, required notices, consent and a practical opt-out process before it begins.
18
Information incidents and breach notification
Suspected loss of or unauthorised access to personal information should be escalated promptly through the applicable incident process. The parties must assess containment, investigation and any notification duties under applicable law. The final contacts, timing and responsibilities remain pending confirmation of the legal entity and Information Officer.
19
Third-party links and services
The website may link to third-party services. Their privacy practices are governed by their own notices. Hosting, database, authentication, email, backup and support providers, their locations and applicable agreements must be listed and reviewed before production use.
20
Client responsibilities
Client organisations are responsible for ensuring that information they provide is accurate, lawfully obtained and appropriate for the agreed monitoring purpose; for notifying users; for maintaining authorised-user access; and for keeping underlying confidential documents in their own approved environment.
21
Changes to this policy
This draft may be revised as the product, providers and legal arrangements change. A final effective date and process for notifying affected people must be set before the policy is approved.
22
Complaints and contact information
For a privacy question or complaint, use the temporary contact email or telephone number below. The legal entity and Information Officer are pending confirmation. Current Information Regulator contact details must be independently verified before publication; none are invented here.
- Service/trading name: Deadline Monitor.
- Legal entity: Pending CIPC registration.
- Registration number: Pending registration.
- Email: consultant1@compimento.co.za.
- Telephone: 073 501 9603.
- Address: 5 Second Street, Arboretum, Bloemfontein, 9301, South Africa.
- Information Officer: Pending confirmation.
23
Publication checklist
Before approval, confirm the registered legal entity and number, Information Officer, final effective date, retention periods, provider register, transborder-processing assessment, verified Information Regulator details, privacy-request process and qualified South African legal/privacy review.
24
Document control
Status: Draft for legal and privacy review. Updated 15 November 2026. Effective date: Pending. This document must not be treated as approved for commercial use.