Leam HQ
GDPR Notice
Designed with POPIA principles in mind. Operational privacy workflows are in place — PDF-only data exports, data subject access / correction / deletion / objection handling, account and workspace deletion workflows, audit-logged actions, and strict separation between user workspaces and Leam HQ internal operations.
This document describes how Leam HQ, a product of Digital Culture Innovations (Pty) Ltd (Registration 2026/173422/07, Kimberley, South Africa), handles your data under the Protection of Personal Information Act, 2013. Questions: legal@leamhq.co.za.
Leam HQ is a South African product operated from Kimberley. We publish this notice for users who fall within the scope of the EU General Data Protection Regulation and the UK Data Protection Act 2018.
Controller
Digital Culture Innovations (Pty) Ltd (Registration 2026/173422/07), Kimberley, South Africa. Contact for GDPR enquiries: legal@leamhq.co.za.
Lawful basis
- Contract — to provide the service you signed up for.
- Legitimate interests — to secure the service, prevent fraud and abuse, and improve the product. We have weighed these against your rights.
- Consent — where you have explicitly opted in (e.g. marketing — currently we do not send marketing email).
- Legal obligation — to meet tax, accounting and compliance requirements.
Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection. Exercise them from Settings → Privacy & Data, or by emailing legal@leamhq.co.za. We respond within 30 days.
International transfers
Our principal infrastructure providers are:
- Supabase — authentication, Postgres database and storage infrastructure — hosted in the EU / Ireland region.
- Render — application hosting and deployment infrastructure — located in Frankfurt, Germany.
Additional sub-processors (Anthropic, Resend, Google, Microsoft and others) are listed with their regions at /subprocessors. Transfers outside the EEA are made under appropriate safeguards including Standard Contractual Clauses where applicable.
EU representative
We have not yet appointed an Article 27 representative in the EU. EU users with formal data-subject requests should email legal@leamhq.co.za in the interim; we will respond within statutory time limits.
Supervisory authorities
You have the right to lodge a complaint with the data protection authority of the EU member state in which you reside.