1. Information We Collect

At mytheranox, we collect information that helps us provide better financial services to our South African clients. When you register for our investment evaluation platform, we gather personal details including your name, email address, phone number, and postal address. We also collect financial information relevant to investment assessments, such as income ranges, investment experience levels, and risk tolerance preferences.

Our platform automatically collects technical information about your device and browsing behavior. This includes IP addresses, browser types, operating systems, and how you navigate through our website. We use cookies and similar tracking technologies to remember your preferences and improve your user experience.

• Personal identification information (name, email, phone)
• Financial profile data for investment evaluations
• Device and browser information
• Website usage patterns and preferences
• Communication records with our support team

2. How We Use Your Information

We use collected information primarily to deliver our investment evaluation services effectively. Your financial profile helps us provide personalized investment assessments and educational content suited to your experience level and goals.

Primary Uses:

1. Providing investment evaluation tools and analysis
2. Sending educational content about financial markets
3. Improving our platform based on user feedback
4. Communicating important account updates
5. Ensuring platform security and preventing fraud

3. Information Sharing and Disclosure

mytheranox operates under strict data sharing principles. We only share your information when necessary to provide our services or when required by South African law. Our trusted service providers, including payment processors and email service providers, may access limited information solely to support our operations.

In certain circumstances, we may disclose information to comply with legal obligations, protect our rights, or respond to government requests. We'll notify users about such disclosures unless prohibited by law.

Authorized Third Parties:

• Payment processing partners for subscription management
• Email service providers for communication delivery
• Analytics providers for platform improvement (anonymized data only)
• Legal authorities when required by South African regulations

4. Data Security Measures

We implement comprehensive security measures to protect your personal and financial information. Our systems use industry-standard encryption for data transmission and storage. All sensitive data is encrypted both in transit and at rest using AES-256 encryption protocols.

Our security framework includes regular vulnerability assessments, secure server configurations, and restricted access controls. Only authorized personnel can access personal data, and all access is logged and monitored. We maintain backup systems and disaster recovery procedures to ensure data availability and integrity.

However, no internet-based system is completely secure. While we strive to protect your information using reasonable security measures, we cannot guarantee absolute security against all potential threats.

5. Your Privacy Rights

Under South African privacy legislation, including the Protection of Personal Information Act (POPIA), you have several important rights regarding your personal data. You can request access to information we hold about you, ask for corrections to inaccurate data, or request deletion of your personal information.

Your Rights Include:

1. Access to your personal information and processing activities
2. Correction of inaccurate or incomplete data
3. Deletion of personal information (subject to legal requirements)
4. Objection to certain processing activities
5. Data portability for information you've provided
6. Withdrawal of consent for specific data uses

To exercise these rights, contact us using the information provided below. We'll respond to your request within 30 days, though complex requests may require additional time. We may need to verify your identity before processing certain requests to protect your privacy.

6. Data Retention and Deletion

We retain personal information only as long as necessary to provide our services and comply with legal obligations. Account information is typically retained while your account remains active and for seven years after closure, in accordance with South African financial record-keeping requirements.

Technical data like website analytics is usually retained for two years, while communication records may be kept for up to five years. When retention periods expire, we securely delete or anonymize personal information using certified data destruction methods.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and provide personalized content. Essential cookies are necessary for basic website functionality, while analytics cookies help us understand how visitors use our platform.

You can control cookie settings through your browser preferences. Disabling certain cookies may limit some website features, but won't prevent you from accessing our main services. We don't use cookies for advertising purposes or share cookie data with advertising networks.

Types of Cookies We Use:

• Essential cookies for login and security functions
• Performance cookies to analyze website usage
• Preference cookies to remember your settings
• Session cookies that expire when you close your browser

8. International Data Transfers

While mytheranox primarily operates within South Africa, some of our service providers may process data in other countries. When international transfers occur, we ensure appropriate safeguards are in place to protect your information according to South African privacy standards.

We only transfer data to countries with adequate privacy protections or use contractual safeguards like standard contractual clauses. All international transfers are documented and subject to the same security requirements as domestic processing.

9. Updates to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our practices, legal requirements, or service offerings. When significant changes are made, we'll notify users via email or through prominent notices on our website at least 30 days before the changes take effect.

Minor updates, such as clarifications or contact information changes, may be implemented without prior notice. We encourage you to review this policy regularly to stay informed about how we protect your privacy. The "Effective Date" at the top of this policy indicates when it was last updated.