Privacy Policy

1. Who we are

Nimbl Mail is a bulk email platform operated by Nimbl, based in South Africa. For any privacy question, or to exercise your rights, contact our Information Officer at privacy@nimbl.one.

2. Our two roles

Under POPIA we act in two different roles depending on the data:

• Responsible party for the personal information of our account holders (the people who sign up to use Nimbl Mail). We decide how that data is used.
• Operator (processor) for the subscriber and recipient data our clients upload and send to. We process that data only on our clients' instructions. If you received an email sent through Nimbl Mail and want your data changed or removed, please contact the sender (our client), who is the responsible party for it.

3. Information we collect

• Account information: name, email address, company details, and password when you register.
• Billing information: plan, transactions, and payment status. Card details are handled by our payment provider, not stored by us.
• Content you upload: subscriber lists, campaigns, templates, and images. This may include the personal information of your recipients.
• Usage and technical data: log data, IP address, device and browser information, and how you use the platform.
• Email engagement data: deliveries, opens, clicks, bounces, and unsubscribes, used to report on campaigns and protect deliverability.

4. How we use information

• To provide, operate, and secure the platform and send your campaigns.
• To bill you and manage your account.
• To protect sending reputation and prevent abuse (for example warm up limits and bounce or complaint monitoring).
• To provide support and to send you important service notices.
• To improve our product and comply with our legal obligations.

5. Who we share information with

We do not sell your personal information. We share it only with service providers who help us run Nimbl Mail, under appropriate safeguards, including:

• Our mail delivery infrastructure, to actually send email.
• Cloud hosting, storage, and content delivery providers.
• Our payment provider, to process subscriptions.
• Error monitoring and email validation services.

We may also disclose information where required by law or to protect our rights, users, or the public.

6. Storage, security, and international transfers

We use technical and organisational measures to protect personal information, including encryption of sensitive credentials, access controls, and audit logging of privileged actions. No system is perfectly secure, but we work to keep your data safe. Some of our providers may process data outside South Africa. Where that happens, we take reasonable steps to ensure a comparable level of protection.

7. How long we keep information

We keep account and billing data for as long as your account is active and as required for legal, tax, and accounting purposes. Campaign and engagement data is kept to provide reporting. You can delete subscribers and content at any time. When you close your account, we delete or anonymise personal information within a reasonable period, unless we must keep it by law.

8. Your rights under POPIA

Subject to the law, you have the right to:

• Ask what personal information we hold about you and request access to it.
• Ask us to correct or delete information that is inaccurate or no longer needed.
• Object to certain processing.
• Withdraw consent where we rely on it.
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these, email privacy@nimbl.one.

9. Cookies

We use cookies that are necessary to sign you in and keep the platform secure, and a small number to remember your preferences. We do not use them to track you across other websites.

10. Changes

We may update this policy from time to time. We will post the updated version here and, for material changes, let you know. Continued use after an update means you accept the revised policy.