GDPR Compliance

1. Our Commitment

Emancip8 (a trading name of LIVEMONEY (Pty) Ltd) is committed to protecting the privacy and data rights of all our users, including those within the European Economic Area (EEA). We comply with the General Data Protection Regulation (GDPR) (EU) 2016/679 to ensure that personal data is processed lawfully, transparently, and securely.

2. Data Controller

LIVEMONEY (Pty) Ltd acts as the data controller for personal data collected through the Emancip8 platform. Our registered address is:

3. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contractual necessity: To provide our AI Executive Assistant service under our Terms of Service
• Consent: Where you have explicitly consented to specific processing activities
• Legitimate interests: To improve our service, ensure security, and prevent fraud
• Legal obligation: Where required by applicable law

4. Your GDPR Rights

As an individual within the EEA, you have the following rights under GDPR:

• Right of access (Art. 15): Request confirmation of whether we process your data and obtain a copy
• Right to rectification (Art. 16): Request correction of inaccurate personal data
• Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
• Right to restrict processing (Art. 18): Request limitation of how we use your data
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making (Art. 22): Not be subject to decisions based solely on automated processing

To exercise any of these rights, contact our Data Protection Officer at dpo@emancip8.org. We will respond within 30 days as required by GDPR.

5. Data Transfers

As a South African company, your personal data may be transferred to and processed in South Africa. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) adopted by the European Commission
• Equivalent levels of data protection as required under GDPR Article 45-49
• Data processing agreements with all sub-processors

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods:

• Account data: Retained for the duration of your account + 30 days after cancellation
• Financial records: Retained for 5 years as required by South African law
• Support communications: Retained for 2 years after resolution
• AI assistant data: Permanently deleted within 30 days of account closure

7. Data Protection Measures

We implement the following technical and organisational measures:

• Encryption of personal data in transit (TLS 1.3) and at rest (AES-256)
• Pseudonymisation where appropriate
• Regular data protection impact assessments (DPIAs)
• Access controls based on the principle of least privilege
• Staff training on data protection and GDPR requirements
• Breach notification procedures aligned with GDPR Article 33-34

8. Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay as required by GDPR Articles 33 and 34.

9. Our Representative in the EEA

As a company established outside the EEA, we have appointed a representative within the EEA for GDPR-related communications:

To be appointed. For all GDPR enquiries, please contact dpo@emancip8.org.

10. Supervisory Authority

If you believe we have violated your data protection rights, you have the right to lodge a complaint with your local supervisory authority. In South Africa, the Information Regulator handles such complaints. EEA residents may lodge complaints with their national data protection authority.

11. Contact Our DPO