Skip to main content

Legal Document

Privacy Policy

Last updated: 25 April 2026

Who we are

The Record is operated by Codist (Pty) Ltd, a South African company. Our Information Officer is [your name], contactable at privacy@therecord.co.za.

We are registered with the Information Regulator of South Africa. [Registration number once obtained]

Jurisdiction

This policy applies in the Republic of South Africa.

What information we collect

Information you give us: None currently. The Record has no user accounts, no registration, and no forms that collect personal information.

Information collected automatically:

  • Server logs: IP address, browser type, pages visited, time of visit. These are retained for 30 days for security purposes only.
  • We do not use Google Analytics or any third-party analytics trackers.
  • We do not use advertising trackers or sell data to any third party.

Information about public figures: The Record publishes factual, publicly available information about individuals in their public capacity — their roles in commissions, investigations, and accountability processes. This falls within the journalism and public interest exemption under POPIA Section 7.

Legal basis for processing (POPIA Section 11)

  • Server logs: Legitimate interest (security and stability)
  • Public figure information: Public interest / journalism exemption
  • We do not process any personal information on a consent basis because we do not collect personal information from users.

Your rights under POPIA

You have the right to:

  • Request access to any personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information
  • Object to processing of your information
  • Lodge a complaint with the Information Regulator

Contact: privacy@therecord.co.za

Information Regulator: inforeg@justice.gov.za | 010 023 5200

Third-party content

The Record links to and displays brief excerpts from third-party news sources. We do not store full article text. All third-party content remains the intellectual property of its original publishers.

Data retention

Server logs: 30 days

Public figure information: Retained indefinitely as it constitutes a public record of accountability proceedings.

International transfers

Our servers are hosted in Germany (Hetzner Online GmbH). Hetzner is GDPR-compliant and operates under EU data protection law, which provides equivalent or greater protection than POPIA.

Changes to this policy

We will notify users of material changes by updating the "Last updated" date above.