Legal

Privacy Policy

Last updated: 9 September 2026

1. Introduction

Kraal CRM ("Kraal", "we", "us", or "our") is operated by Jordan Development Solutions (Pty) Ltd. This Privacy Policy explains what personal information we collect, how we use and protect it, and the choices available to you when you visit our website or use the Kraal CRM product (the "Service"). It applies to website visitors, prospective and current Kraal customers and their users, and, where relevant, the contacts, customers, and prospects that Kraal customers manage within the Service.

2. Information we collect

When you interact with us directly — for example by visiting our website, requesting a demo, contacting support, or creating a Kraal account — we may collect:

  • your name, email address, and phone number
  • your company name and account details
  • the content of support enquiries or messages you send us
  • information about how you use the Service, such as features accessed and actions taken
  • technical information such as IP address, device/browser type, and basic security logs, where applicable

We refer to this collectively as "Account and Website Information" in this policy.

Some information is required to create or administer a Kraal account or provide requested services. If you do not provide information that is required for these purposes, we may be unable to provide the relevant account, feature, or service.

3. Information we process on behalf of customers

Kraal customers may use the Service to store and manage information about their own contacts, customers, and prospects ("Customer Data"), which can include:

  • names and contact details
  • company information
  • communication preferences
  • tasks and reminders
  • campaigns
  • email and SMS activity
  • inbound and outbound messages
  • notes and other CRM information entered by the Kraal customer

For Customer Data, the Kraal customer is generally the Responsible Party under the Protection of Personal Information Act 4 of 2013 ("POPIA"), and decides the purpose and manner of processing. Kraal acts as an Operator, processing Customer Data only on the instructions of, and under agreement with, the relevant Kraal customer.

If you are a contact, customer, or prospect of a Kraal customer and wish to exercise a privacy right over Customer Data (such as access, correction, or deletion), please contact that Kraal customer directly, as they control that information. Kraal will assist its customers in responding to such requests where required by our agreements or by law.

4. How we use personal information

We use Account and Website Information to:

  • provide, operate, and maintain the Service
  • authenticate users and secure accounts
  • respond to support requests and enquiries
  • send account, service, and administrative communications
  • detect, investigate, and prevent fraud, abuse, or security incidents
  • bill for paid plans, where applicable
  • administer and improve our product and website
  • meet our legal and regulatory obligations
  • send marketing communications about Kraal, where permitted (see Section 11)

5. Legal grounds for processing

Under POPIA, we process personal information only where a lawful basis applies. Depending on the circumstances, this may include your consent, performance of a contract with you, compliance with a legal obligation, the legitimate interests pursued by us, a Kraal customer, or another third party where permitted by POPIA, or another basis permitted under POPIA.

6. Sharing of information

We do not sell personal information. We may share information with service providers who help us deliver the Service, including for:

  • cloud hosting and infrastructure
  • email delivery (we use SendGrid to send transactional and campaign emails)
  • SMS delivery (we use ZoomConnect to send SMS messages)
  • monitoring, logging, and security services
  • support services
  • billing and payment processing, where applicable

These providers may only process information as necessary to provide their services to us. We may also disclose information where required by law, regulation, court order, or other lawful process.

7. International transfers

Some of our service providers or hosting infrastructure may process information outside South Africa. Where personal information is transferred outside South Africa, we handle such transfers in accordance with POPIA and rely on an appropriate permitted basis or safeguards where required.

8. Data security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, or alteration. No system can be guaranteed completely secure, but we work to keep information appropriately protected and to respond promptly if an incident occurs.

9. Data retention

We retain Account and Website Information only for as long as reasonably necessary for the purposes described in this policy, including providing the Service, meeting contractual and legal obligations, resolving disputes, and enforcing our agreements.

Customer Data is retained in accordance with our agreement with the relevant Kraal customer and our data retention and deletion procedures.

10. Your privacy rights

Subject to applicable law, you may have the right to:

  • request access to the personal information we hold about you
  • request correction of inaccurate or incomplete information
  • request deletion or destruction of your personal information, where applicable
  • object to certain processing of your information
  • withdraw consent, where we rely on consent as our lawful basis
  • lodge a complaint with the Information Regulator of South Africa

These rights are not absolute and may be limited by law — for example, where we must retain information for legal, contractual, or record-keeping purposes. To exercise a right relating to Account and Website Information, contact us using the details in Section 13. For Customer Data, see Section 3.

11. Marketing communications

Kraal may send you marketing communications about our own products and services, where you have agreed to receive them or as otherwise permitted by law. You can opt out at any time using the unsubscribe link in those emails or by contacting us.

Separately, Kraal customers may use the Service to send their own campaigns (such as email or SMS) to their contacts. Kraal does not control the content of these campaigns. Each Kraal customer is responsible for ensuring their campaigns comply with applicable privacy and direct-marketing laws, including obtaining any required consent and honouring opt-out and unsubscribe requests from their recipients.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices, the Service, or legal requirements. The "Last updated" date at the top of this page reflects the most recent version. We encourage you to review this page periodically.

13. Contact us

Kraal CRM is operated by:

Jordan Development Solutions (Pty) Ltd (Registration No. 2012/186334/07)
PO Box 443, Newlands, Pretoria, 0049

If you have questions about this Privacy Policy or how we handle Account and Website Information, contact us at hello@kraal.site or via our Contact page.

Our Information Officer, Abrian P. Stemmet, can be contacted directly at abrian.stemmet@jordandev.co.za for POPIA-related requests.

You also have the right to lodge a complaint with the Information Regulator of South Africa regarding the processing of your personal information. POPIA complaints can be submitted to POPIAComplaints@inforegulator.org.za. Further information and complaint procedures are available at inforegulator.org.za.