Privacy notice

This notice explains what personal information Durio processes, why, where it is kept and for how long, and the rights you have under the Protection of Personal Information Act (POPIA).

Two roles

For the firms that use Durio, we are an operator. The estate information a firm captures (about the deceased, heirs, executors, creditors and others) belongs to that firm, which is the responsible party. We process it only on the firm's instructions and under our operator agreement with it. Questions about that information should go to the firm.

For our own platform data, we are the responsible party. That is: the accounts of the people who use Durio (name, email address, username and any contact details they add), sign-in and IP records, security logs, firms' billing contacts and invoices, and messages sent through our contact form.

Why we process platform data

• To provide the service: accounts, signing in, keeping each firm's data apart, and support.
• To keep it secure: sign-in records, audit trails and security logs.
• To bill firms: billing contacts and invoices.
• To answer enquiries. We send news about Durio only to people who ticked the box asking for it, and anyone can stop it at any time.

We never use a firm's estate information for any other purpose: no analytics on it, no training of models, no marketing and no sharing between firms.

Where it is kept

Firms' data and backups are stored in the European Union, in Amsterdam. Email (including invoices) is sent through a provider in the United States. Our sub-operators page lists every service involved and what it receives.

How long it is kept

• Sign-in sessions: at most 7 days.
• Audit trail: as long as the firm sets, 5 years by default.
• A firm's data: until a Firm Admin confirms its deletion. It is deleted 14 days after that, and backups expire within 35 days.
• Invoices: as long as tax law requires.
• Contact-form enquiries: 12 months.

Cookies

A firm's address uses one cookie, to keep you signed in. This marketing site uses no cookies, trackers or advertising scripts.

Your rights

You may ask what information we hold about you, and ask us to correct or delete it, or object to its processing. For estate information, contact the firm concerned. You may also complain to the Information Regulator (inforegulator.org.za).

Contact

Information Officer: [name and email to be completed].