Privacy policy

Last updated 4 October 2026

4Core Business Solutions (Pty) Ltd is the responsible party for personal information processed by BidBoard, under the Protection of Personal Information Act 4 of 2013 (POPIA).

What we collect, and why

• Account details (name, company, email, password stored only as a one-way hash): to run your account and send your alerts.
• Your alert settings (keywords, provinces, industries): to choose which tenders to email you.
• Billing records: Paystack processes your card. We keep only a Paystack customer reference, the card brand and last four digits, and payment dates and amounts, for billing and our tax records. We never see or store your full card number.
• Technical data (a session cookie, IP address in server logs): to keep you logged in and protect the service from abuse. We don't use advertising or tracking cookies.

Who we share it with

Only the service providers needed to run BidBoard: Paystack (payments), Resend (sending email), DigitalOcean (hosting) and Cloudflare (website security and delivery). Some of them process data outside South Africa under agreements that protect it as POPIA requires. We don't sell personal information.

Marketing

Alert emails are part of the service you sign up for. We only send other product news if you ticked the box for it, and every email has an opt-out link.

How long we keep it

While your account is open. If you delete your account we remove your personal details and alerts straight away, and keep billing records for 5 years as tax law requires.

Your rights

You may ask to see, correct or delete your personal information, or object to its processing. Most of this you can do yourself in My account. Otherwise contact our Information Officer, Desmond Hyde, at [email protected]. You may also complain to the Information Regulator (inforegulator.org.za).

Security

Data is encrypted in transit (HTTPS), passwords are hashed, the database is not reachable from the internet, and backups are kept off the server.