Privacy Policy
This document provides general information and is not legal advice. Consider independent legal review for your business.
1. Introduction
This Privacy Policy explains how MB & Co. Studio (“we”, “us”, “our”) processes personal information when you visit our websites, contact us, or use RosterWise (the “Service”), a staff scheduling platform for South African retailers.
We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African law.
2. Responsible party & Information Officer
The responsible party for personal information collected through RosterWise is MB & Co. Studio.
Our Information Officer can be contacted at admin@mbandco.co.za or 079 516 5879.
3. Personal information we collect
Depending on how you use the Service, we may process:
- Account details: name, email address, phone number, role, and login credentials for retailer and manager accounts.
- Organisation details: business name, store names, addresses, and billing contact information.
- Workforce data uploaded by your employer: employee names, contact details, departments, contracts, schedules, leave, attendance-related data, and sales or footfall data used for roster planning.
- Communications: emails or messages you send us for support, sales, or billing.
- Technical data: IP address, browser type, device information, and session cookies required to keep you signed in.
4. Employers & employee data
Where a retail business uses RosterWise to manage staff, that business is typically the responsible party for its employees’ personal information. We act as an operator processing data on the employer’s instructions to provide the Service.
Employers must ensure they have a lawful basis to collect and share employee information with us, inform staff as required by POPIA, and use the Service in line with employment and privacy law.
5. Why we process personal information
We use personal information to:
- Provide, maintain, and improve the Service (scheduling, reporting, notifications, and related features).
- Create and manage accounts and authenticate users.
- Process subscriptions, invoices, and customer support.
- Send service-related communications (for example roster notifications where enabled).
- Protect the security and integrity of our systems and comply with legal obligations.
6. Lawful basis
We process personal information where necessary to perform a contract with you or your organisation, where required by law, where we have a legitimate interest that is not overridden by your rights (such as securing our platform), or with your consent where consent is required.
8. Cross-border transfers
We aim to store and process data in South Africa. If we transfer personal information outside South Africa, we will do so only where permitted by POPIA and with appropriate safeguards.
9. Retention
We retain personal information for as long as needed to provide the Service, meet contractual and billing requirements, and comply with law. When an organisation stops using RosterWise, we will delete or anonymise data within a reasonable period unless we must retain it for legal, tax, or dispute-resolution purposes.
10. Security
We implement reasonable technical and organisational measures to protect personal information, including access controls, encrypted connections (HTTPS), and secure password storage. No online system is completely secure; please use strong passwords and keep login details confidential.
11. Your rights under POPIA
Subject to POPIA, you may request access to, correction or deletion of, or objection to processing of your personal information. You may also withdraw consent where processing is based on consent.
To exercise these rights, contact our Information Officer. We may need to verify your identity and, for employee data, refer your request to your employer where they are the responsible party.
If you are not satisfied with our response, you may lodge a complaint with the Information Regulator (South Africa):
- Website: https://inforegulator.org.za
- Email: inforeg@justice.gov.za
13. Children
RosterWise is a business service and is not directed at children under 18. We do not knowingly collect personal information from children.
14. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes will be communicated where appropriate.
15. Contact us
Questions about this Privacy Policy or our processing of personal information:
Email: admin@mbandco.co.za
Phone / WhatsApp: 079 516 5879
See also: Terms & Conditions