| Privacy Policy |
|---|
| Lookn (Pty) Ltd |
| Version 1.01 │Last Updated: 10 July 2026 |
Lookn (Pty) Ltd (“Lookn”) is committed to protecting your privacy and complying with applicable data protection and privacy laws. This Privacy Policy will inform you as to how we process your Personal Information when you engage with us and tell you about your privacy rights and how the law protects you (as Data Subject).
It is important that you read this Privacy Policy so that you are fully aware of how and why we are using your Personal Information. This Privacy Policy supplements other notices and privacy policies and is not intended to override them.
By providing Personal Information to Lookn, registering a Service Account, submitting an enquiry, or clicking a “Submit”, “Register” “Contact”, “Connect”, “WhatsApp”, “Email” or similar button, you consent to the processing of your Personal Information in accordance with this Privacy Policy.
IMPORTANT INFORMATION AND WHO WE ARE
| Responsible Party | Information / Privacy Officer | Complaints | |
|---|---|---|---|
Lookn (Pty) Ltdis the Responsible Party and responsible for your Personal Information (collectively referred to as "Lookn", "we", "us" or "our" in this Privacy Policy). Registration Number: 2022/695684/07 | Full Name: | David John Marais | South Africa: You can lodge a complaint with the Information Regulator: http://www.justice.gov.za/inforeg/ |
| Contact Details: | +27 71 389 7185 | United States: You can lodge a complaint with the competent authority responsible for enforcing applicable privacy, data protection or consumer protection laws in the state in which you reside: https://www.naag.org/find-my-ag/ | |
| Email: | info@lookn.world | We encourage you to contact us first to resolve any issues. | |
Privacy Policy Updates
We regularly review our Privacy Policy. The latest update date is on the first page. Older versions are available upon request. Future changes will be posted on our website or shared during your interactions with us, and will apply immediately once published.
Please keep your Personal Information accurate and up to date by informing us of any changes during your relationship with us.
Third-Party Sites: We do not control third-party sites linked to ours. These sites may use cookies or collect your data. We are not responsible for how these sites handle user information.
Third-Party links: Our Site(s) may link to external websites, plugins, or apps. Sharing your Personal Information with them is at your own risk—we are not liable for any loss or damage resulting from such disclosures, as we do not control how third parties use your data. Always read their privacy policies when you leave our site.
THE DATA WE COLLECT ABOUT YOU
We collect your Personal Information, as defined in this Policy. It does not include data where the identity of the Data Subject has been removed (anonymous data).
We may Process different kinds of Personal Information about you when we engage with you, which we have grouped together as follows:
| Type of Data | Details |
|---|---|
| Identity Data | First name, Last name, Age, Nationality, Username or Similar Identifier, Job Title/Position at School, School Name and Grade, Role/Account Type Date of Birth and Gender; |
| Contact Data | Billing address, Physical address, Delivery address, Email address, Telephone numbers, and details of your public social media profiles; |
| Content Data | Service or business listings, user content, message exchanges via platform messaging, and platform-generated badges, Milestones, or Progress indicators (if applicable). |
| Location Data | Current location, approximate geographic location, GPS location (where permission is granted), address details, location preferences, search radius information and other location-related information used to facilitate location-based searches and the display of nearby businesses; |
| Financial Data | Payment card details and/or banking details. |
| Transaction Data | Details about payments to and from us and other details of Services you have accessed on our website; |
| Children Information | Personal Information about a Child; |
| Technical Data | Internet protocol (IP) address, Your login data, Browser type and version, Time zone setting and location, Browser plug-in types and versions, Operating system and platform, Other technology on the devices you use to access this website/ portal; |
| Usage Data | Information relating to interaction with our website, products and services, including URL clickstream data, pages or services viewed, performance and error data, interaction and navigation behaviour, customer service contact details, and service transaction instructions exchanged via our APIs. |
| Marketing and Communications Data | Marketing preferences in receiving marketing from Lookn and third parties, your communication preferences (communications related to the Services). |
| Aggregate data and pattern data (“Pattern Data”): | Aggregated statistical, demographic or transactional information derived from Personal Information, which does not identify a Data Subject. If combined with Personal Information so as to enable identification, it will be treated as Personal Information and processed in accordance with this Privacy Policy. |
| Special Personal Information | Religious, Biometric and Health (including disability) information; |
| Additional Personal Information | You may choose to provide additional Personal Information to us. When you do so, you agree to provide accurate and current information, and to not impersonate or misrepresent any person or entity or falsely state your affiliation with anyone or anything. |
PLEASE TAKE NOTE: We may also collect categories of Personal Information recognised under applicable United States privacy laws, including identifiers, commercial information, internet or electronic network activity information, geolocation information and inferences derived from Personal Information.
You may choose to provide additional Personal Information to us, in which event you agree to provide accurate and current information, and not to impersonate or misrepresent any person or entity or falsely state or otherwise misrepresent your affiliation with anyone or anything.
Special Personal Information: We do not collect any Special Personal Information about you, except during provision of our Services or where required by law, which shall be collected as per the applicable legal requirements and, where necessary, with your consent.
Children Information (Children Data): e may process the Personal Information of a child with the consent of a Competent Person or where otherwise permitted by applicable law.
Submission of Personal Information on Behalf of Another: If you submit someone else's personal information, you must obtain their consent first. We will assume you have this consent and process the information as instructed. By submitting such information, you agree to indemnify us against any third-party claims related to a lack of proper consent or legal exception.
If you fail to provide Personal Information: If required by law or contract, we may not be able to offer or continue Services if you do not provide requested Personal Information. If this happens, we will let you know
United States Privacy Categories
For purposes of applicable United States privacy laws, including the California Consumer Privacy Act ("CCPA"), the categories of Personal Information we may collect include identifiers, contact information, commercial information, internet or electronic network activity information, geolocation information, professional information, inferences derived from Personal Information, and other categories of Personal Information described in this Privacy Policy
HOW IS PERSONAL INFORMATION COLLECTED?
We use different methods to collect data from and about you including through:
| Direct Interactions | Automated technologies | Third Parties/Publicly Available Sources |
|---|---|---|
When you visit our offices or meet with our professional staff at any other location as instructed by you; |
|
|
Instruct us to provide certain Services
|
|
|
COOKIES
See our Cookies Policy.
HOW WE USE YOUR PERSONAL INFORMATION
We do not sell Personal Information in exchange for monetary consideration. However, certain disclosures of Personal Information to service providers, analytics providers, advertising providers and technology providers may constitute "sharing", "targeted advertising" or a similar activity under applicable privacy lawsMost commonly, we will use Personal Information in the following circumstances:
where you have given us your consent; or
where we need to perform the contract, we are about to enter into or have entered into with you; or
where it is necessary for the protection of the Data Subject’s legitimate interest; or
where it is necessary for our legitimate interests (or those of a Third-Party) and your interests and fundamental rights do not override those interests; or
where we need to comply with a legal obligation.
We will get your consent before sending third-party direct-marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us or using such automated facilities made available by us.
Purposes for which we will use Personal Information:
The table below outlines how we use Personal Information and the legal grounds for doing so, including legitimate interests where relevant.
We may process your data under multiple lawful bases depending on its use. Contact us if you need clarification about which legal basis applies to your case.
Personal Information may also be processed for advertising, marketing, analytics, profiling, recommendation and platform personalisation purposes, subject to applicable law and any consent requirements.
| Type of data | Lawful basis for processing including basis of legitimate interest | |
|---|---|---|
| Compliance with legal and regulatory obligations | Information required by law or regulation | Legal obligation |
| User account registration and profile management | Identity and contact information | Consent / Contract |
| Business Profile creation, management and publication on the Platform | Identity, contact and profile information | Contract / Legitimate interest |
| Provision of the Platform and related services | Identity, contact, profile and usage information | Contract |
| Enabling location-based business searches and recommendations | Location, technical and usage information | Consent / Legitimate interests |
| Communication and relationship management | Identity and contact information | Consent / Legitimate interests |
| Billing, subscription and payment administration | Financial and transactional information | Contract / Legal obligation |
| Marketing (where permitted) | Identity, contact and marketing preferences | Consent / Legitimate interests (existing users) |
| Website and Platform administration, analytics and business operations | Technical, usage and location information | Legitimate interests |
| Publishing and maintaining Business Profiles and listings | Identity, contact and profile information | Contract / Legitimate interest |
| Moderation of reviews, listings and user-generated content | Identity, profile and content information | Legitimate interests / Legal obligation |
| Customer support, complaints handling and dispute resolution | Identity, contact and transactional information | Contract / Legal obligation |
| Security monitoring, fraud prevention and Platform protection | Identity, technical and usage information | Legitimate interests / Legal obligation |
| Delivering relevant Platform content and advertisements | Identity, contact, profile, usage, technical and location information | Legitimate interests |
| Platform improvement, analytics and research | Technical and usage information | Legitimate interests |
| Making suggestions and recommendations regarding businesses and Platform features | Identity, contact, profile, usage and marketing preferences | Legitimate interests / Consent |
United States Disclosures
For purposes of applicable United States privacy laws, Personal Information may be collected, processed, disclosed, retained or otherwise used for the following business or commercial purposes:
providing and maintaining the Services;
creating, publishing and maintaining Business Profiles and listings;
facilitating communication between Users and Businesses;
processing and responding to enquiries submitted through the Platform;
improving, developing and maintaining the Platform and Services;
analytics, reporting and research purposes;
security monitoring, fraud prevention and risk management;
advertising, marketing and promotion of the Services;
personalising content, recommendations and search results; and
complying with legal and regulatory obligations.
Marketing: We strive to provide you with choices regarding certain Personal Information uses, particularly around marketing and advertising.
Promotional Offers
For Clients:
We may use your contact details to send service-related communications. You may opt out at any time (see section 5 iii below).
For Non-Clients:
We may collect your email through staff or our mailing system. Before sending any direct marketing, we will obtain your consent (opt-in).
Third-party marketing.
We will get your express opt-in consent before we share your Personal Information with any third-party for marketing purposes.
TAKE NOTE:. We may share anonymised, aggregated data for advertising, but IMPORTANT: we never disclose information that identifies individuals
Opting Out
You can ask us or third-parties to stop sending you marketing messages at any time by logging into the website or unsubscribe on the email communication or by contacting us at any time and requesting to op-out of our marketing services.
Where you opt out of receiving these marketing messages, this will not apply to Personal Information provided to us as a result of a Service purchase, service experience or other transactions .
Targeted Advertising
Where permitted by law, we may use Personal Information, Usage Data, Technical Data, Location Data and similar information to provide personalised content, recommendations, advertising and marketing communications. Where applicable law grants a right to opt out of targeted advertising, cross-context behavioural advertising, profiling or similar activities, Data Subjects may exercise such rights by contacting us using the details in this Privacy Policy.
Automated processing and decision making
Lookn is committed in protecting personal information when utilising AI Systems
Use of AI Systems:-
Do we use AI Systems: Yes we do
For what purpose do we use AI Systems: We may use AI Systems to improve the Services, provide recommendations, facilitate introductions and perform analytics. Where required by law, decisions materially affecting a Data Subject will be subject to human oversight.
We ensure that all AI Systems processing and automated decision-making complies with applicable data protection laws.
We conduct comprehensive reviews of all AI-generated content to ensure accuracy and reliability. Our team of experts verifies this content to maintain high standards of quality and relevance;
You are welcome to contact us (click here) at any time (in writing) to request an explanation on how your personal information is processed by AI Systems.
Kindly take note: your rights as per par. 12) below also applies in terms of personal information processed by AI Systems.
Where required under applicable law, Data Subjects may request additional information regarding significant automated decision-making, profiling or similar processing activities involving their Personal Information.
Change of purpose.
We will use your Personal Information only for its original purpose unless a compatible reason arises. If you want more details on this compatibility, please contact us.
For any unrelated use, we will notify you and explain the legal basis.
Your information may also be processed without your knowledge or consent when required or permitted by law.
DISCLOSURES OF PERSONAL INFORMATION
We may share Personal Information with the following parties for the purposes outlined above:
Internal Third-Parties: Our group companies, partners, or correspondents, who are required to follow this Policy when processing your Personal Information.
External Third-Parties: Defined in the Definitions section, as well as those specified by your instructions.
Third-Parties involved in business changes: If we sell, transfer, or merge our business or assets, new owners may use your Personal Information per this Privacy Policy.
During the preceding 12 months we may have disclosed the categories of Personal Information described in section 2 to service providers, contractors, hosting providers, analytics providers, payment providers, advertising providers, professional advisers and regulatory authorities for the purposes described in this Privacy Policy.
All Third-Parties must protect your Personal Information, act lawfully, and only process it for approved purposes per our instructions. Service providers are not permitted to use your Personal Information for their own purposes.
We may also share Personal Information with External Third-Parties if necessary to:
Comply with laws, regulations, or legal requests;
Enforce our Terms of Use and investigate potential violations;
Address fraud, security, or technical issues;
Protect against imminent harm to the rights, property, or safety of Elemental Numerics, website users, or the public, as allowed by law.
We may disclose Personal Information to analytics providers, advertising partners, cloud service providers and technology providers in connection with providing, maintaining, securing, improving and promoting the Services.
INTERNATIONAL TRANSFERS
We may transfer Personal Information internationally, including to countries that may not provide the same level of protection as the jurisdiction in which the Personal Information was collected. Where required by law, appropriate contractual, technical, organisational or other safeguards will be implemented. All transfers comply with the relevant Data Protection Legislation.
We maintain records of all cross-border transfers and safeguards, and will provide this information on request.
By submitting your Personal Data, you consent to its transfer outside your country when necessary
DATA SECURITY
We've implemented technological and organisational safeguards to protect Personal Information from loss, unauthorised access, alteration, or disclosure. Access is restricted to those with a business need, all of whom are bound by confidentiality.
Procedures are in place for suspected breaches; we will notify you and regulators if legally required.
Certain legislation obliges us to report specific offences to authorities within set timeframes. We cannot be held responsible for any resulting consequences from such reporting.
DATA RETENTION
How long will we use your Personal Information for?
As long as needed to fulfil the purposes it was collected for and meet legal, regulatory, tax, accounting, or reporting requirements. If necessary, we may retain it longer for complaints or best practices related to our relationship with you.
You may request deletion of your data; see your legal rights below.
Retention periods depend on the type and sensitivity of your Personal Information, risk of unauthorised disclosure, processing purposes, and applicable laws.
Sometimes we anonymize your data for research or statistics so it’s no longer linked to you, and may use this indefinitely without further notice.
For purposes of determining appropriate retention periods, we consider the nature and sensitivity of the Personal Information, the purposes for which the Personal Information was collected, the potential risk of harm arising from unauthorised use or disclosure, legal and regulatory obligations, dispute resolution requirements and our legitimate business needs.
RECORDS
We will maintain thorough, accurate, and current records of Personal Information processing, including access, control, security, approved subcontractors, purposes and categories of processing, transfers to third countries and safeguards, customer instructions, and an overview of technical and organisational security measures, as well as the retention and disposal of Personal Information.
SOCIAL MEDIA
Our website, app, or services may offer social plug-ins from platforms like Facebook, Instagram, or LinkedIn. If you interact with these networks via our site, your activity may be visible to them and reflected in your profile according to your privacy settings. To prevent this, log out of your social account or adjust your privacy preferences before visiting.
Communication and engagement on external social media networks are governed by their individual terms and privacy policies.
Please use social media responsibly and with care. We will never request personal or sensitive information through social media; for such matters, please contact us directly by phone or email.
Our social media pages may share links, and some platforms shorten URLs. Check the authenticity of links before clicking, as we cannot guarantee safety against spam or hacking and are not liable for any resulting damages.
DATA SUBJECT’S LEGAL RIGHTS
Under certain circumstances, you have the following rights under data protection laws in relation to your Personal Information:
Request for Access: You may request access to the Personal Information we hold about you (a “data subject access request”). A prescribed fee may apply. Please refer to our PAIA Manual on our website.
Request Correction: You may request that inaccurate or incomplete Personal Information be corrected, subject to verification.
Request Deletion: You may request deletion of your Personal Information where there is no lawful basis to continue processing it. Erasure may be refused where required by law. This does not limit our rights to use Aggregate Data and Pattern Data.
Object to Processing: You may object to processing based on legitimate interests or for direct marketing purposes, unless we have compelling legitimate grounds to continue.
Request restriction of processing: You may request restriction of processing where accuracy is disputed, processing is unlawful, the data is required for legal claims, or an objection is under consideration.
Request Information: You may request information regarding the categories of Personal Information we collect about you, the sources from which such information is obtained, the purposes for which it is processed, and the categories of third parties to whom such Personal Information may be disclosed.
Request Data Portability: Where required by applicable law, you may request a copy of certain Personal Information in a structured, commonly used and machine-readable format.
Right to Opt Out: Where applicable law grants such right, you may request that we cease selling, sharing, profiling, processing for targeted advertising purposes or otherwise processing your Personal Information for activities in respect of which an opt-out right exists.
Right to Limit Use of Sensitive Personal Information: Where applicable law grants such right, you may request that we limit the use and disclosure of Sensitive Personal Information to purposes authorised by law.
Right against Discrimination: We will not discriminate against any person for exercising any privacy right available under applicable Data Protection Legislation.
Withdraw consent at any time: Where processing is based on consent, you may withdraw consent at any time. This will not affect prior lawful processing and may limit the Services we can provide.
b) If you wish to exercise any of the rights set out above, please contact us at the details mentioned 1)c) above.
c) Fee required: No fee is payable unless prescribed by law. We may charge a reasonable fee or refuse requests that are unfounded, repetitive or excessive.
d) Verification: We may request information to verify your identity and protect your Personal Information.
e) Response Time: We aim to respond within 30 (thirty) days, unless the request is complex, in which case we will notify you.
SUBCONTRACTORS
We may appoint subcontractors to assist in providing our services. All subcontractors are required to adhere to applicable Data Protection Legislation and contractual obligations to ensure the confidentiality and security of your Personal Information.
PERSONAL INFORMATION BREACH
In the event of a security compromise, personal information breach or similar incident under applicable Data Protection Legislation, including section 22 of POPIA where applicable, we are committed to managing the incident promptly, responsibly, and transparently. Where there are reasonable grounds to believe that the personal information of a data subject has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and the affected data subjects as soon as reasonably possible after becoming aware of the compromise, unless the identity of the data subjects cannot be established.
Such notification will be provided in accordance with section 22(4) of POPIA and will include sufficient information to allow affected data subjects to take protective measures, including:
A description of the possible consequences of the security compromise;
A description of the measures taken or proposed to be taken by us to address the security compromise;
Recommendations to the data subject on how to mitigate the potential adverse effects of the security compromise; and
If known, the identity of the unauthorised person who may have accessed or acquired the personal information.
We maintain a record of all breaches, even those not requiring notification, to ensure compliance with the Data Protection Legislation.
DEFINITIONS
Artificial Intelligence (AI) System or AI Systems means a computer-based technology which is designed to perform tasks that typically require human intelligence. It encompasses a variety of techniques, such as machine learning and natural language processing, enabling the system to learn, adapt and make decisions autonomously.
Channels: means any of our technology channels made available for you to access our Services, for example, website(s), App(s) or social media sites;
Competent Person means any person who is legally competent to consent to any action or decision being taken in respect of any matter concerning a child.
Consent means any voluntary, specific and informed expression of will in terms of which permission is given for the processing of Personal Information.
Data Subject means the person to whom Personal Information relates and, in this document, refers to you as the party providing Personal Information that will be processed by us or a relevant third-party.
Data Protection Legislation means any and all applicable laws relating to the protection of data or of Personal Information and shall include the Protection of Personal Information as per the POPI Act.
Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best Service and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your Personal Information for our legitimate interests. We do not use your Personal Information for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required ore permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us.
Operator means a person who processes personal information for a responsible party in terms of a contract or mandate, without coming under the direct authority of that party.
Platform means the website, software, applications and related technology operated by Lookn through which the Services are provided;
Performance of Contract means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
PAI Act means the Promotion of Access to Information Act, Act 2 of 2000.
Personal Information means information as defined under applicable data protection legislation.
POPIA means the Protection of Personal Information Act, Act 4 of 2013.
Personnel means Lookn employees, directors or authorised sub-contractors.
Responsible Party means a public or private body or any other person which, alone or in conjunction with others, determines the purpose of and means for processing Personal Information.
Services has the same meaning as per our Terms of Use via any of our channels/technologies.
Sites means our website, and or App and/or social media sites and/or other communication channels;
Special Personal Information means information that may be sensitive information, such as details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and biometric information or criminal convictions and offences.
Sensitive Personal Information means Personal Information classified as sensitive under applicable law and may include precise geolocation information, financial account credentials, government-issued identifiers, biometric information, health information, racial or ethnic origin, religious beliefs and other categories designated as sensitive by applicable law.
Targeted Advertising means displaying advertisements to a Data Subject where the advertisement is selected based on Personal Information obtained from that Data Subject's activities across websites, applications, services or online properties.
THIRD-PARTIES:
Internal Third-Parties: Partners, affiliates, employees, shareholders, directors and/ or agents of Lookn (if applicable), acting as joint responsible parties or operators and who may also provide IT and system administration services and undertake leadership reporting.
External Third-Parties:
Service providers acting as operators who provide IT and system administration services
Professional advisers acting as operators (i.e. correspondents and counsel/advocates) or joint Responsible Parties, including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services.
The South African Revenue Services, regulators and other authorities acting as operators or joint Responsible Parties who require reporting of processing activities in certain circumstances
Courts of law or any other authorities where we have an obligation under law to share your Personal Information
In the event that we sell or buy any business or assets, in which case we may disclose your Personal Information to the prospective seller or buyer of such business or assets.
-END OF POLICY-