Privacy Policy
Introduction
This Privacy Notice for Easysync360 (PTY) LTD ("we", "us", or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you visit our website at https://www.easysync360.com, download and use our app, use the SaaS platform (cloud-based business management: invoicing, billing, document management, LIMS, and medical-aid claims), or engage with us in other related ways including marketing or events.
Questions or concerns? Contact Support@easysync360.com.
Summary of key points
- We may process personal information depending on how you interact with us.
- We may process sensitive personal information with your consent or as permitted by law.
- We do not collect information from third parties.
- We process your information to provide, improve, and administer Services, communicate, for security & fraud prevention, and to comply with law.
- We may share information in specific situations with specific categories of third parties.
- We use organisational and technical measures to protect data (no system is 100% secure).
- You have rights depending on your location; exercise them via a data subject access request or by contacting us.
1. What information do we collect?
Personal information you disclose to us — collected when you register, express interest, participate, or contact us. May include: names, phone numbers, email addresses, mailing addresses, job titles, usernames, contact preferences, contact/authentication data, billing addresses, passwords, company name, tax/VAT number, patient information, laboratory information, medical aid membership information, and healthcare practitioner information.
Sensitive information (with consent or as permitted): health data and financial data.
Payment data — processed by Paddle (https://www.paddle.com/legal/privacy); EasySync360 uses Paddle to process subscription payments.
Social media login data and application data (mobile device access/data, push notifications).
Information automatically collected — IP address, browser/device characteristics, operating system, language, referring URLs, device name, country, location, and usage; collected via Log/Usage Data, Device Data, and Location Data. Our use of Google APIs adheres to the Google API Services User Data Policy.
2. How do we process your information?
We process your information to: facilitate account creation & authentication; deliver services; respond to inquiries and offer support; send administrative information; fulfil and manage orders, payments, and returns; request feedback; send marketing (you can opt out anytime); protect our Services (including fraud monitoring); identify usage trends; and protect vital interests. This also includes account and organization management, invoicing & billing, document storage and processing (SyncDoc), authentication & security, customer support, platform security & fraud prevention, service improvement & analytics, and system administration.
3. What legal bases do we rely on?
For users in the EU/UK (GDPR/UK GDPR), we rely on: Consent, Performance of a Contract, Legitimate Interests, Legal Obligations, and Vital Interests. In Canada, we rely on your express or implied consent, subject to legal exceptions.
4. When and with whom do we share your personal information?
We may share your information with vendors, consultants, and third-party service providers who perform services for us, including: Cloud Computing Services, Communication & Collaboration Tools, Data Storage Service Providers, Payment Processors, User Account Registration & Authentication Services, Website Hosting Service Providers, and Data Analytics Services. We may also share information during Business Transfers (for example, a merger, sale, financing, or acquisition).
5. Do we use cookies and other tracking technologies?
Yes — we use cookies and similar technologies (web beacons and pixels) for security, preferences, and basic functions, and we work with third parties and service providers for analytics and advertising. See our Cookie Notice for details. You can opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.
6. Do we offer AI-based products?
Yes — we offer AI Products (AI bots). Data is processed in line with this Notice and our third-party agreements. You can opt out by contacting us.
7. How do we handle your social logins?
If you register or log in via a social media account (such as Facebook or X), we receive profile information including your name, email, friends list, and profile picture. We are not responsible for the provider's own use of your data.
8. Is your information transferred internationally?
Our servers are located in France; your information may be transferred to, stored, and processed in France, the United States, and other countries. For transfers from the EEA/UK, we use the European Commission's Standard Contractual Clauses.
9. How long do we keep your information?
We keep your information for as long as necessary for the purposes set out in this Notice (no longer than the period you maintain an account), unless a longer period is required or permitted by law. When data is no longer needed, we delete or anonymise it, or securely store and isolate it.
10. How do we keep your information safe?
We use appropriate technical and organisational security measures. However, no transmission or storage over the internet is 100% secure, so please access the Services within a secure environment.
11. Do we collect information from minors?
We do not knowingly collect from or market to children under 18 (or the equivalent minimum age). Accounts found to belong to minors are deactivated and deleted. If you become aware of any data we may have collected from a minor, contact Support@easysync360.com.
12. What are your privacy rights?
Depending on your location (EEA, UK, Switzerland, Canada, or US states), you may have rights to access and obtain a copy of your data, rectification or erasure, restriction of processing, data portability, the right not to be subject to automated decision-making, and the right to object. You can withdraw consent at any time and opt out of marketing. Account information can be reviewed, changed, or terminated. Individuals in the EEA/UK may complain to a data protection authority; those in Switzerland may contact the FDPIC.
13. Controls for Do-Not-Track features
We do not currently respond to Do-Not-Track (DNT) browser signals, as no finalised standard exists.
14. Do United States residents have specific privacy rights?
Residents of CA, CO, CT, DE, FL, IN, IA, KY, MD, MN, MT, NE, NH, NJ, OR, RI, TN, TX, UT, and VA may have rights to access, correct, copy, delete, and withdraw consent. This includes a categories-of-personal-information table; the right to opt out of targeted advertising, sale, and profiling; the right to designate an authorised agent; the right to request verification; and the right to appeal. We have not sold or shared personal information in the preceding 12 months.
15. Do other regions have specific privacy rights?
Australia (Privacy Act 1988) and New Zealand (Privacy Act 2020): you have rights of access and correction, and may complain to the OAIC or the NZ Privacy Commissioner.
Republic of South Africa (POPIA): you have rights of access and correction, and may complain to The Information Regulator (South Africa) at enquiries@inforegulator.org.za or POPIAComplaints@inforegulator.org.za.
16. Do we make updates to this notice?
Yes — updates are indicated by a revised "Last updated" date.
17. How can you contact us about this notice?
Email Support@easysync360.com or write to us by post: Easysync360 (PTY) LTD, Johannesburg, Gauteng 2196, South Africa.
18. How can you review, update, or delete the data we collect?
Submit a data subject access request. Depending on your location, you may have rights to access, correct, or delete your data, and to withdraw consent.
