Privacy Notice — Vibermacher (Pty) Ltd
Last updated: 22 October 2026
This notice explains what personal information Vibermacher collects, where it comes from, why we use it, who receives it, and your rights, including how to object. It covers our data products and services, our contact with businesses, and this website.
Who we are
Vibermacher (Pty) Ltd (“Vibermacher”, “we”) is a company registered in South Africa (registration number 2025/272998/07), at 37 Boundary Road, Highlands North, Johannesburg, Gauteng, 2192. We are the responsible party under South Africa’s Protection of Personal Information Act 4 of 2013 (POPIA), and the controller under the UK GDPR and the EU GDPR where they apply.
Information Officer: Zachary Bucheister, zach@vibermacher.com, +27 73 411 5129. Registered with the Information Regulator (South Africa), registration number 2026-070005.
What we do
We create data products, research and related services about organisations, markets and technology. We build them from publicly available information, our own observation and measurement of publicly accessible systems, and data from third-party providers, and we provide, sell or license them to businesses. Most of the information concerns organisations, but some of it can identify people associated with them in a business capacity.
Where our information comes from
We obtain information from sources including, without limitation:
Public registers and official publications, in the United Kingdom, South Africa and other countries, for example:
- company registers (such as Companies House and South Africa’s CIPC), including company, officer, ownership, charge and filing records;
- financial and professional regulators’ registers and published lists (such as the Financial Conduct Authority’s Financial Services Register, the FSCA, central banks and other licensing authorities);
- official gazettes and insolvency, court and tribunal publications (such as The Gazette);
- land, property, charity, trade, competence and professional registers;
- public procurement, grant and planning notices; and
- other government and regulatory publications and open data.
Published business sources, for example:
- organisations’ websites, press releases, reports, filings and announcements;
- industry award, shortlist, ranking and membership pages;
- trade association, business, review and trade-finder directories and listings, and online maps;
- news, industry publications and research;
- conference, event, speaker and exhibitor information; and
- job advertisements.
Professional and social media profiles and pages made public by their owners, such as LinkedIn and public business pages, groups and posts on other platforms.
Our own observation of publicly accessible systems and services: information we collect by accessing, querying, testing and measuring websites, online services, interfaces and other systems that are publicly accessible, and recording what they publish or return.
Third-party providers: data, research, contact and verification providers, and our partners.
You: when you contact us, use this website, buy from us or work with us.
What we collect
- About people associated with organisations: name, business or trading name, role, business contact details, business identifiers, and published records, statements and activities relating to the business, with their source and date.
- About business contacts: name, role, organisation, work contact details, location, professional profile links, publicly available professional information, and our correspondence with you and your preferences.
- From publicly accessible systems: technical identifiers and information those systems publish or return (such as domain names, network addresses, endpoints, responses and metadata), and published operator or contact details.
- About customers and suppliers: contact, billing and payment details, orders, contracts and correspondence.
- From this website: what you send us through the contact form or by email, and technical information collected by our website and its service providers.
Why we use it, and on what basis
| Purpose | Legal basis |
|---|---|
| Creating, compiling and providing data products, research and services | Our legitimate interests, and those of our customers, in information about organisations, markets and technology and the people who act for them in a business capacity (POPIA s11(1)(f); UK/EU GDPR Art. 6(1)(f)). Information from public records, or deliberately made public, may be collected from those sources and used for further compatible purposes (POPIA s12(2)(a), s15(3)(b)). |
| Communicating with businesses about our products and services | Our legitimate interests (POPIA s11(1)(f); UK/EU GDPR Art. 6(1)(f)), in line with the electronic-marketing rules that apply to each recipient. You can opt out at any time. |
| Providing products and services to customers, and working with suppliers | Performing a contract (POPIA s11(1)(b); UK/EU GDPR Art. 6(1)(b)) |
| Accounting, tax, legal and regulatory obligations | Legal obligation (POPIA s11(1)(c); UK/EU GDPR Art. 6(1)(c)) |
| Running and securing this website and our systems, and answering enquiries | Our legitimate interests, or your request |
We have weighed our legitimate interests against your interests, rights and freedoms, and keep a record of that assessment.
Who receives it
- Customers who buy or license our products and services, and distributors, marketplaces and partners through which we offer them, in South Africa and abroad. Our terms require customers to use the data lawfully.
- Service providers that host, store, process or deliver our data, communications and systems.
- Professional advisers, banks, payment providers, accountants and auditors.
- Actual or prospective investors, acquirers or successors, in connection with a financing, sale or reorganisation of our business.
- Regulators, courts, law enforcement and other authorities, where the law requires or permits it.
Transfers outside your country
We are based in South Africa, and our customers, partners and service providers may be in other countries, including the United Kingdom, the European Union and the United States. Where we transfer personal information across borders, we do so as the applicable law allows, for example to recipients subject to laws, binding rules or contract terms that give adequate protection, or where the transfer is necessary for a contract (POPIA s72; UK/EU GDPR Chapter V).
How long we keep it
We keep personal information only for as long as we need it for the purposes above, including to keep our products current and accurate, and for as long as the law requires. We decide this by the purpose, the source, whether the information is still current, and our legal obligations. If you object or opt out, we keep the minimum needed to make sure we respect your choice.
Your rights
Depending on where you are, you may:
- ask whether we hold personal information about you, and for a copy;
- ask us to correct or delete it;
- object to our processing, including to its use in our products and for direct marketing;
- ask us to restrict processing, or for data portability, where the law provides;
- withdraw consent where we relied on it; and
- complain to a regulator.
To object or exercise a right, email zach@vibermacher.com with your name and the organisation or record concerned. We will respond within the time the law requires, and we do not charge for this. In South Africa you may also use the Information Regulator’s prescribed forms (POPIA Regulations, Form 1 for objections and Form 2 for correction or deletion).
To complain:
- South Africa: Information Regulator, https://inforegulator.org.za, enquiries@inforegulator.org.za
- United Kingdom: Information Commissioner’s Office, https://ico.org.uk/make-a-complaint/
- European Union: your local data protection authority
Security
We take reasonable technical and organisational measures, appropriate to the nature of the information and the risks, to protect personal information. If a security compromise affects your personal information, we will notify you and the regulator as the law requires.
Access to information
Our PAIA manual explains how to request access to our records: https://vibermacher.com/paia.
Changes
We may update this notice from time to time. The current version is always on this page, with its date.
Contact
Zachary Bucheister, Information Officer, Vibermacher (Pty) Ltd · zach@vibermacher.com · +27 73 411 5129 · 37 Boundary Road, Highlands North, Johannesburg, Gauteng, 2192