Skip to content
Zenkona markZenkona

Privacy Policy

Last updated: July 10, 2026

Shandre Lourens (Zenkona) ("we", "us", "our") operates Zenkona. This Privacy Policy explains how we collect, use, store, and protect personal information when you use our website and services.

Who is responsible for your data?

Operator: Shandre Lourens (Sole proprietor)
Trading as: Zenkona
Jurisdiction: South Africa
Information Officer: [email protected]

Information we collect

  • Account data: name, email address, profile image (via Kinde authentication), timezone, and notification preferences.
  • Workspace data: obligations, renewal dates, notes, categories, costs, and uploaded documents you choose to attach.
  • Billing data: subscription status and Paystack customer codes. We do not store full card numbers.
  • Technical data: IP address, browser type, and server logs for security, debugging, and abuse prevention.
  • Communications: emails we send (reminders, digests, invites) and delivery logs.

Lawful bases for processing

We process personal information on the following bases:

  • Contract: to provide renewal tracking, reminders, team collaboration, and billing you signed up for.
  • Legitimate interests: to secure our service, prevent fraud, and improve reliability.
  • Consent: for optional analytics cookies and marketing communications (we send no marketing emails today).
  • Legal obligation: where required by applicable law, including tax or regulatory requests.

How we use your information

  • Authenticate you and maintain your account.
  • Track renewals and send reminders you have configured.
  • Process subscriptions and display billing status.
  • Enable team collaboration and workspace invitations.
  • Respond to support requests and legal inquiries.

Subprocessors

We use trusted third-party providers to operate Zenkona. A full list is available on our Data Processing Summary page.

International transfers

Some subprocessors are located outside South Africa (including the United States and EU). Where personal information is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses and processor agreements.

Retention

We retain your data while your account is active. After account deletion, we remove personal data within 30 days, except where longer retention is required by law (e.g. billing records).

Security

We use industry-standard measures including encrypted connections (HTTPS), authenticated access controls, and encrypted object storage for documents. See our Security page for details.

Your rights (POPIA and GDPR)

Depending on your location, you may have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your account and associated data.
  • Export your data in a portable format (available in Settings).
  • Restrict or object to certain processing (e.g. email reminders).
  • Withdraw consent for optional cookies at any time.
  • Lodge a complaint with the SA Information Regulator or your local supervisory authority.

Exercise these rights in Dashboard → Settings → Privacy & Data or email [email protected].

Children

Zenkona is not intended for users under 18. We do not knowingly collect data from children.

Data breaches

In the event of a personal information breach that poses a risk to your rights, we will notify affected users and the Information Regulator as required by POPIA, and affected EU/UK users where GDPR applies.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date above. Continued use after changes constitutes acceptance.

Questions? Contact [email protected]