PRIVACY POLICY

Effective Date: February 5, 2026 This Privacy Policy explains how we collect, use, disclose, and protect the personal information you provide or that we collect when you access or use our services when you use our website (https:m25.co.za).. It explains your privacy rights and choices, and how to contact us about our privacy practices. Please read this Policy carefully. By using our Platform, you consent to the data practices described in this Policy. This Privacy Policy has been created with the help of the Free Privacy Policy Generator.  

Entity and Contact Information

This Privacy Policy is published on behalf of our business entity operating in Gauteng, South Africa. Business Name: The Matthew 25 Project Registered Address: 1, 145 President Brand Rd, Rynfield AH, Benoni, 1514 All references to “we”, “us”, or “our” refer to the business entity identified above.  

How to Contact Us

If you have questions, requests, or concerns about this Privacy Policy, please contact us at: info@m25.co.za.

1. Information We Collect

We collect multiple types of information to operate effectively and provide you the best experience. The categories of information we collect include:  

1.1. Information You Provide Directly

When you register, create an account, fill forms, contact us, or otherwise communicate with us, you may provide personal information such as your name, email address, phone number, billing and payment information, profile information, and other identifiers. For businesses, this may include the business contact person, company name, and business address — only when you entered that information and only if entity_type is ‘business’. For individual operators, business name and address are intentionally omitted from this Policy output and will not appear in rendered policy text.  

1.2. Automatically Collected Information

We automatically collect technical and usage data when you interact with the Platform, which may include IP address, device identifiers, device model and operating system, browser type, language preferences, access times, pages visited, search queries, referring/exit pages, crash logs, and performance metrics.  

1.3. Location Data

We may collect approximate or precise location data from your device if you grant location permissions. Location data may be used to provide location-sensitive functionality, improve service relevance, or for fraud prevention. You can control location access in your device settings.  

1.4. Payment and Transaction Data

When you make purchases or use paid features, we collect payment data (such as billing name, billing address, and payment card details) which is processed by secure third-party payment processors. We do not store full payment card numbers on our servers unless explicitly required and disclosed.  

1.5. Communications and Support Data

We maintain records of communications and support interactions to provide assistance, detect abuse, and improve service quality. These records may include email content, chat transcripts, telephone logs, and attachments you send.  

1.6. Derived and Aggregated Data

We may derive non-identifying, aggregated, or de-identified data from the information we collect. Aggregated data is used for analytics, performance measurement, and research; it cannot reasonably be used to identify you.  

2. How We Use Information

We use collected information for the following purposes:
  • To provide, operate, maintain, and improve the Platform and related services.
  • To authenticate users, manage accounts, provide customer support, and communicate important updates.
  • To process payments, prevent fraud, and enforce our Terms of Service.
  • To personalize content, recommendations, and advertising where allowed.
  • To perform analytics, monitor service health, and produce aggregated statistics for internal use.
  • To comply with legal obligations, respond to lawful requests from government or law enforcement, and protect rights and safety.
 

3. Legal Bases for Processing (If Applicable)

To the extent applicable, our lawful bases for processing personal data may include:
  • Consent: You have given consent for specific processing activities (e.g., marketing emails, cookies) where required.
  • Contractual Necessity: Processing required to perform our agreement with you (e.g., account provisioning, payment processing).
  • Legal Obligation: Processing required to comply with law or regulatory requests.
  • Legitimate Interests: Processing necessary for our legitimate interests, balanced against your rights (e.g., fraud prevention, network security, direct communications).
  • Website: refers to https:m25.co.za, accessible from https:m25.co.za.
 

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (such as web beacons, pixels, and local storage) to enhance user experience, analyze site and app performance, remember your preferences, and deliver relevant content. You can manage cookie preferences via your device or browser settings and opt out of certain types of cookies. We classify cookies into categories including essential cookies, preference cookies, analytics cookies, and advertising cookies. Essential cookies enable core functionality. Preference and analytics cookies support personalization and performance. Advertising cookies enable targeted ads (only used if we operate ads or use ad networks). To manage cookies, you may use your browser settings or device controls. For mobile apps, permission prompts and in-app settings may allow you to opt out of certain tracking.  

5. Advertising and Analytics analytics

We do not display advertisements from third-party networks that use tracking for ad targeting. We utilize analytics tools to collect aggregated and anonymized usage statistics to improve the Platform. These tools may collect information such as pages visited, time spent, device information, and general geographic data. Analytics data is used internally for product improvements and troubleshooting. Where third-party advertising or analytics vendors operate, their own privacy policies govern their data practices. We recommend reviewing such policies for more details and opt-out tools. To learn about Google Analytics privacy, see: Google Partner Sites Policy.  

6. Sharing and Disclosure

We do not sell your personal information. We disclose personal information only as described below or with your consent:
  • To service providers and contractors providing hosting, infrastructure, payment, and other services to operate the Platform.
  • To affiliates and partners for joint operations, where you have consented or where permitted by law.
  • To comply with legal processes, such as court orders, subpoenas, or government investigations.
  • To protect our rights, property, or safety, or the rights, property, or safety of others.
We may share data with the following categories of third parties: ["Other"]. These service providers assist with hosting, payment processing, customer support, analytics, communication, and other necessary operations.  

7. International Data Transfers

We generally store and process data within our operating jurisdiction. If we do transfer data internationally, we will ensure appropriate protections are in place.  

8. Data Retention and Deletion

We retain personal information for as long as necessary to provide services, comply with legal obligations, resolve disputes, enforce agreements, and for legitimate business purposes. Retention periods vary by data type and legal requirements. Where possible, we will honor deletion requests, subject to verification and legal exceptions. You may request deletion of personal data we hold about you. We will process deletion requests in accordance with applicable law and our internal retention policies. Deletion may be subject to verification steps and exceptions where retention is required for legal or legitimate business purposes.  

9. Security Measures

We use administrative, technical, and physical controls designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. Controls include access controls, encryption in transit and at rest (where applicable), secure data centers, vulnerability scanning, and internal security policies. While we strive to use reasonable safeguards, no system can be guaranteed to be 100% secure.  

10. Children’s Privacy

Our Platform is not directed to children under the age of 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children without parental consent. If a parent or guardian believes we have collected information from a child under the applicable age without consent, please contact us and we will take steps to delete such data.  

11. Your Privacy Rights

Depending on where you reside, you may have rights including the right to access, correct, or delete your personal data, the right to portability, the right to restrict or object to processing, and the right to withdraw consent. You may also have the right to opt-out of certain data uses or profiling, and to opt-out of the sale or sharing of personal information where applicable. To exercise these rights, contact us at the email address listed above. We will verify requests consistent with applicable law and respond within applicable timeframes.  

12. Rights for European Residents (GDPR)

This Privacy Policy is written to be consistent with the rights provided under the European Union General Data Protection Regulation (GDPR). If you are located in the European Economic Area (EEA), you may have additional rights under the GDPR (described below). Under GDPR, you may request access to your personal data, rectification, erasure, restriction of processing, data portability, and to object to processing. In some cases, you can lodge a complaint with a supervisory authority where you believe your rights have been violated. To learn about Google Analytics privacy, see: Google Partner Sites Policy.  

13. Rights for California Residents (CCPA/CPRA)

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). This policy contains sections describing how to exercise those rights, including access, deletion, and opt-out of sale/sharing (if applicable). If you are a California resident, you can request details about the categories of personal data we collect, the categories of sources, the categories of recipients, and the business purposes for collection. You may request deletion and opt-out of sale or sharing where applicable. We do not knowingly sell the personal information of minors under 16 without affirmative authorization. For more about your rights under CCPA, visit: California CCPA Information.  

14. Third-Party Links and Integrations

The Platform may contain links to third-party websites or integrate with third-party services. We are not responsible for their privacy practices. Review their privacy policies before providing personal information to third parties.  

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will provide notice on the Platform or by other means as required by law. The updated Policy will indicate the Effective Date. Continued use of the Platform after changes constitutes your acceptance of the revised Policy.  

16. Data Breach Response

In the event of a security breach that affects personal information, we will follow our incident response plan, take reasonable steps to mitigate harm, and notify affected individuals and regulators as required by applicable law. We maintain processes for evaluating and responding to security incidents.  

17. Automated Decision-Making and Profiling

We may use automated systems, including algorithms and machine learning, to analyze data for product improvements, fraud detection, personalization, and other operational purposes. Where applicable, you have rights regarding automated decisions about you; contact us to learn whether automated processing applies to your data and how to exercise any rights.  

18. International Users

If you are accessing the Platform from outside our primary operating country, your data will be processed under the laws of the country where our servers or subprocessors operate, while respecting the protections described in this Policy. Transfers are made in compliance with applicable safeguards and legal mechanisms for cross-border data flows.  

19. Retention, Anonymization and Archiving

When data is no longer necessary for the purposes for which it was collected, we delete or anonymize it. In some cases we may retain information for historical, statistical, or legal compliance reasons. Anonymized or aggregated data may be retained indefinitely and used for analytics and research.  

20. How to Exercise Your Rights

To exercise your rights, or to inquire about our privacy practices, please contact us via the email address provided above. We will attempt to respond within applicable statutory timelines and may require verification of identity to protect your information and the rights of others.  

21. Complaint Mechanisms and Supervisory Authorities

If you are in the EU/EEA, you may lodge a complaint with a data protection authority. If you are in another jurisdiction and wish to file a complaint, contact your local supervisory body or our designated contact for privacy matters.  

22. Additional Disclosures

We may provide additional privacy disclosures in context (for example, within the App privacy settings, account pages, or terms for specific features). Those supplemental notices are incorporated into this Policy where applicable.  

23. Data Security and Third-Party Subprocessors

We vet our subprocessors and require them to adhere to contractual obligations to protect personal data. We may update our list of subprocessors and will provide notice of material changes where required by law.  

24. Miscellaneous

Where any provision of this Policy conflicts with applicable law, such provision will be interpreted to the extent necessary to comply with the law. Headings are for convenience only and do not affect interpretation. This Policy does not create contractual rights for third parties.  

25. Final Notes

We strive to maintain transparent and robust privacy practices. Thank you for trusting The Matthew 25 Project with your information. Please review this Policy periodically for updates. Publisher: The Matthew 25 Project — 1, 145 President Brand Rd, Rynfield AH, Benoni, 1514. Last updated: February 5, 2026.