Privacy Policy & Data Protection Statement
Media375 (Pty) Ltd trading as FirearmApp SA is committed to protecting your privacy in full compliance with the South African Protection of Personal Information Act (Act 4 of 2013).
Last Updated: July 2026
1. Responsible Party & Contact Details
Media375 (Pty) Ltd is the designated Responsible Party under POPIA responsible for collecting, processing, and storing your personal data.
Entity Name: Media375 (Pty) Ltd
Trading Name: FirearmApp SA
Contact Email: info@firearmappsa.co.za
Website: https://firearmappsa.co.za
Information Officer Contact: privacy@firearmappsa.co.za
2. Personal Information Collected
To assist you with drafting legally compliant South African firearm motivation letters and tracking SAPS application progress, we collect:
- Identity Information: Full names, South African Identity Number (or passport number), residential and postal address.
- Contact Information: Phone number and email address.
- Firearm & Application Details: Calibre, firearm category, serial numbers, competency certificate numbers, shooting association memberships, and motivation justifications.
- Transaction & Billing Data: Payment verification status via PayFast (card numbers and banking credentials are never processed or stored directly on our servers).
3. Purpose & Lawful Basis of Processing
Under POPIA Section 10 & 13, personal information is collected and processed exclusively for the following lawful purposes:
Motivation Drafting
Generating custom motivation letters under Sections 13, 15, 16, and 16A of the Firearms Control Act 60 of 2000.
Account & Security
User authentication, session verification via 2FA/OTP, and account administration.
SAPS Tracking
Enabling applicants to check and monitor their firearm application status.
Legal & Compliance
Fulfilling accounting, auditing, tax, and regulatory record-keeping obligations in South Africa.
4. Data Security Safeguards
We implement enterprise-grade technical and organizational measures to safeguard your data against loss, damage, unauthorized access, or disclosure:
- Encryption in transit using TLS 1.3 / HSTS (HTTP Strict Transport Security) with preload enabled.
- Row-Level Security (RLS) enforcement ensuring users can strictly access only their own data.
- Database infrastructure hosted on secure, certified cloud environments with automated backups.
- Strict Access Control and Two-Factor Authentication for administrative operators.
5. Data Subject Rights
Under POPIA, you retain full statutory rights regarding your personal information:
- Right of Access (Section 23): You may request confirmation of whether we hold personal information about you and request copies of recorded data.
- Right to Rectification (Section 24): You can correct, update, or complete inaccurate or incomplete personal records directly from your account dashboard or by contacting us.
- Right to Deletion / Erasure: You may request the destruction or deletion of personal data when processing is no longer required by law.
- Right to Object (Section 11(3)): You may object at any time to the processing of personal information on reasonable grounds.
6. Enquiries & Information Regulator
For any questions, requests, or privacy concerns, please contact our Information Officer at info@firearmappsa.co.za.
If you believe your personal data has been processed unlawfully, you have the statutory right to lodge a complaint with the South African Information Regulator:
Information Regulator (South Africa): JD House, 27 Stiemens Street, Braamfontein, Johannesburg | Email: enquiries@inforegulator.org.za