Legal
GDPR notice
Last updated: January 2026
If you are in the European Economic Area or the United Kingdom, this notice explains how the General Data Protection Regulation applies to your personal data when you use TouchBasePro.
Who we are
TouchBasePro (Pty) Ltd is a South African company that provides customer engagement software (email, SMS, voice, WhatsApp, USSD, push and forms). When you contact us, request a demo, or use one of our products, we act as a controller for the personal data you give us directly, and as a processor for the data you send through our platform to your own contacts.
What we collect and why
We collect contact details (name, email, company, phone) when you fill in a form or email us, account and billing information when you become a customer, and platform telemetry needed to operate the service securely. We do not run third-party advertising or behavioural tracking on this site.
Lawful bases
We rely on one of the following Article 6 bases depending on the context: your consent (for example, when you opt in to marketing), performance of a contract (to deliver the service you have signed up for), legal obligation (for example, tax and anti-fraud), and our legitimate interests (to keep the platform secure and to respond to your enquiries) balanced against your rights.
International transfers
Your data is processed in Microsoft Azure data centres, primarily in South Africa North and West Europe. For transfers out of the EEA or UK we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where relevant), together with the technical and organisational measures described on our security page.
Your rights
Under the GDPR you have the right to access your personal data, ask us to correct or delete it, object to or restrict processing, withdraw consent at any time, and ask for a copy in a portable format. To exercise any of these rights, email privacy@touchbasepro.com and we will respond within one month.
Retention
We keep personal data only for as long as we need it for the purpose we collected it, or for as long as the law requires. Prospect and enquiry data is reviewed annually and deleted when it is no longer relevant.
Complaints
You have the right to lodge a complaint with your local supervisory authority (for example, the Information Commissioner's Office in the United Kingdom, or your national data protection authority in the EEA). We would appreciate the chance to address your concern first, so please contact us before you escalate.
Contact
Privacy queries: privacy@touchbasepro.com. For our South African data protection notice, see the POPIA notice.