Privacy Policy

Effective date: 10 August 2026 · Last updated: 10 August 2026

Panda Power ("Panda", "we", "us", "our") respects your privacy and is committed to protecting your personal information in line with South Africa's Protection of Personal Information Act, 2013 (POPIA). This policy explains what information we collect, why we collect it, how we use and safeguard it, and the rights you have over it.

1. Who we are (the Responsible Party)

Panda Props (Pty) Ltd, trading as Panda Power, a company registered in South Africa (registration number 2015/305368/07), is the Responsible Party for the personal information described in this policy.

2. What this policy covers

This policy applies to the Panda Power website (pandapower.co.za) and to the billing-analysis, check-metering and related services we provide, including our secure client portals.

3. What personal information we collect

When you use our bill-review service or contact us, we may collect:

• Contact details — your name, email address, mobile / WhatsApp number, and the company and role you give us.
• The invoices and documents you upload, which typically contain the account holder's name, account number, meter number, service address, consumption and demand readings, tariffs and amounts billed.
• Records of our dealings with you — your requests, our correspondence, and the analysis and reports we prepare.
• Basic technical information needed to run the website securely, such as server logs. We do not use advertising or tracking cookies.

4. Information about other people

The invoices you upload may contain the personal information of other people (for example, the account holder, where that is not you). By uploading them, you confirm that you are entitled to share this information with us for the purpose of the analysis, and that you have the necessary authority or consent to do so.

5. Why we process your information

We process your information to:

• verify your identity — for example, one-time codes we send to your email address and mobile number;
• prepare your billing analysis, check-metering comparison and any dispute documentation;
• communicate with you about your request and our services;
• meet our legal and regulatory obligations.

We rely on your consent, the performance of our agreement with you, and our legitimate business interests as the lawful basis for this processing. You can withdraw your consent at any time (see section 10).

6. When we share your information

We do not sell your personal information. We share it only:

• with service providers who host or process data on our behalf, under confidentiality and data-protection terms;
• with a municipality or utility, where you instruct us to lodge or support a billing dispute on your behalf;
• with attorneys or specialist billing-recovery and dispute-resolution providers, where you instruct us to involve them in pursuing or resolving a dispute with a utility on your behalf, under confidentiality terms;
• where we are required to by law, court order, or to establish, exercise or defend a legal claim.

7. Where your information is processed (cross-border)

Our systems are hosted with a reputable provider whose servers are located in the European Union, so your information may be processed outside South Africa. The EU has data-protection laws that provide a level of protection comparable to POPIA, and we take steps to keep your information protected wherever it is processed.

8. How we protect your information

We use appropriate technical and organisational measures — including access controls, encryption in transit (HTTPS), authentication and regular backups — to keep your information secure. No system is completely secure, but we work to protect your information against loss, misuse and unauthorised access.

9. How long we keep it

We keep your information only for as long as we need it for the purpose it was collected, to provide our services to you, and to meet our legal obligations. You can ask us to delete your invoices and personal information at any time (see below), subject to any records we are required by law to retain.

10. Your rights under POPIA

You have the right to:

• ask what personal information we hold about you and request access to it;
• ask us to correct or update information that is inaccurate or out of date;
• ask us to delete or destroy your information;
• object to the processing of your information in certain circumstances;
• withdraw your consent (this will not affect processing we have already carried out lawfully);
• lodge a complaint with the Information Regulator.

To exercise any of these rights, email us at info@pandapower.co.za.

11. Complaints to the Information Regulator

If you are not satisfied with how we have handled your personal information, you may complain to the Information Regulator (South Africa):

12. Changes to this policy

We may update this policy from time to time. The latest version will always appear on this page, with the effective date shown at the top.

13. Contact us

For any question about this policy or your personal information, contact us at info@pandapower.co.za.