Privacy Policy

RLB Media ("we", "us") operates an advertising network across South Africa. This policy explains what information we process and your rights under the Protection of Personal Information Act, 2013 (POPIA). It is written to be plain and honest.

Who is responsible

RLB Media is the responsible party. Our Information Officer can be reached at hello@rlbmedia.com.

If you scan a QR code or view an ad page

When you scan one of our codes and view a page of offers, we log a scan event so advertisers can measure performance. That event contains the car or venue code, the time, which offer (if any) you tapped, and a one-way hashed, pseudonymised device marker. The marker is a SHA-256 hash of your IP address combined with a secret salt; we do not store your raw IP address, and the marker cannot be reversed to identify you.

We do not collect your name, phone number, email, or any directly identifying information when you scan. We do not build advertising profiles about you.

If you contact us or advertise with us

If you enquire or buy advertising, we process the business and contact details you give us (such as name, email, phone, and company) to respond, provide the service, and keep proper records and invoices.

Why we process it (lawful basis)

• To measure and report advertising performance (our legitimate interest, using only pseudonymised data).
• To provide and bill for services you request (performance of a contract).
• To comply with tax and legal obligations.

Sharing

We share aggregated, de-identifiedscan statistics with the relevant advertiser (for example, "42 unique riders this month"). We never sell personal information. We use trusted processors to run the service, including our hosting and database providers, under appropriate safeguards.

Storage and transfers

Data is encrypted in transit and protected by row-level security. Some processors store data on servers outside South Africa (for example, in the EU). Where this happens, we rely on providers that offer an adequate level of protection.

Retention

Scan events are retained to produce historical reports. Short-lived technical records (such as rate-limiting data) are purged automatically. Business records are kept as required by law.

Your POPIA rights

You may request access to, correction, or deletion of personal information we hold about you, and you may object to certain processing. Contact hello@rlbmedia.com. You also have the right to lodge a complaint with the Information Regulator of South Africa.

Changes

We may update this policy and will revise the date above when we do.