Privacy & Cookie Notice

1. Who we are and how to contact us

MenoMove is operated by Business Engage Association NPC, a non-profit company registered in South Africa (registration number 2005/021365/08). MenoMove is Africa's menopause information hub, community and workplace movement.

Privacy contact: Malcolm Larsen, Company Secretary, Business Engage Association NPC.

For all privacy-related enquiries, including requests to access, correct or delete your personal information, please contact us at [email protected].

2. The personal information we collect

2.1 When you submit an enquiry form

Contact form — We collect your name, email address, subject line and message. You may include any information you choose in the message field.

Meno Chat enquiry — We collect your name, email address, country or city, your areas of interest in Meno Chat services, your preferred language, and whether you are interested in joining or hosting a Meno Chat gathering.

Corporate Champions enquiry — We collect your name, work email address, organisation name, country, areas of interest in workplace menopause support, and any message you choose to include.

We use this information to respond to your enquiry and to contact you about the services you have expressed interest in. We do not use it for any other purpose without your separate consent.

2.2 When you create an account

If you register for a MenoMove account, we collect your name, email address, and a password. Passwords are never stored in readable form — they are processed using a one-way cryptographic hashing function (bcrypt) so that the original password cannot be recovered from what we store. We also record whether you have verified your email address, your account role, whether you have opted in to newsletter communications, and the date and time of your last visit to the site.

Published MenoMove articles and downloadable resources are publicly accessible and do not require an account.

2.3 When you use the site

Session information — When you log in, we create a session record that includes a session token, your IP address, and your browser's user agent string. This information is used solely to maintain your login session and is deleted when your session expires.

Article views — If you are logged in, we record which articles you have read, together with the date and time of each view. This information is used for internal analytics only and is not shared with third parties.

Resource downloads — When you download a resource, we record which resource was downloaded and the date and time of the download. If you are logged in, this record is linked to your account. If you are not logged in, the record contains no information that identifies you.

2.4 Information you may choose to disclose

Some of our forms include free-text fields where you may choose to share personal information beyond what is specifically requested. You may also choose to share information about your health, including your experience of menopause, in any message or enquiry you send to us.

We treat any health-related information you share with us with the same care and protections as special personal information under the Protection of Personal Information Act 4 of 2013 (POPIA), regardless of whether it strictly meets the legal threshold for that category.

3. Why we collect your information and our lawful basis

4. Analytics and the use of cookies

4.1 What we use

We use an analytics service provided by GoDaddy, the platform on which MenoMove is hosted. This service uses a script called C2/Signals.

4.2 What the analytics script does

The C2/Signals script loads on every visit to MenoMove, including before you accept or decline the cookie banner. The script is provided by GoDaddy as part of the hosting platform.

If you accept analytics, information about which links and buttons you click is recorded — including the text of the element, the page you were on, and whether the link was internal or external to MenoMove. This information is sent to GoDaddy's analytics platform.

If you decline analytics, our application does not send click event data. The C2/Signals script continues to load as part of the platform infrastructure. We are seeking confirmation from GoDaddy of whether the script records any data on page load independently of our application's click listener, and whether any additional platform scripts collect data. This notice will be updated when that confirmation is received.

4.3 How we store your choice

Your consent choice is stored in your browser's local storage. It expires after 365 days, after which you will be asked again.

4.4 Changing your choice

You can review and change your analytics preference at any time using the Privacy & Cookie Settings in the footer of every page on this site.

4.5 Third-party analytics processing

Analytics data collected through the C2/Signals script is processed by GoDaddy. We are seeking confirmation of the terms on which GoDaddy processes this data, including whether GoDaddy acts as a data processor under POPIA and whether a data processing agreement is in place. This section will be updated when that confirmation is received.

5. Email communications

When you submit an enquiry form, the information you provide is transmitted to us by email through GoDaddy's email relay service. This means the content of your submission passes through GoDaddy's email infrastructure.

An acknowledgement email is sent to the email address you provide when you submit a form. If you need to contact us directly, please use the contact form or email [email protected].

6. Who we share your information with

We do not sell, rent or trade your personal information. We share it only in the following circumstances.

GoDaddy — MenoMove is hosted on GoDaddy's platform. GoDaddy has access to the infrastructure on which your information is stored. GoDaddy also processes analytics data (see Section 4) and email relay data (see Section 5) as part of providing the platform.

Legal obligation — We may disclose your information if required to do so by law, court order, or a lawful request from a public authority.

We do not share your information with any other third parties.

7. How long we keep your information

We aim to retain your personal information for no longer than is necessary for the purpose for which it was collected. The following periods are our current policy targets:

Automated deletion processes are not yet in place. Until they are implemented, records that have reached the end of their retention period will be deleted manually on a periodic basis, or on request. If you would like your personal information deleted before the end of the applicable period, please contact us at [email protected] and we will action your request within 30 days.

After the applicable retention period, we will delete or anonymise your information. Where anonymisation is possible, we may retain aggregated, non-identifiable statistics for longer periods to understand long-term usage trends.

8. Your rights under POPIA

Under the Protection of Personal Information Act 4 of 2013, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate or incomplete information
• Deletion — request that we delete your personal information, subject to any legal obligation to retain it
• Objection — object to the processing of your personal information where we rely on legitimate interest as our lawful basis
• Withdrawal of consent — withdraw consent at any time where we rely on consent as our lawful basis; withdrawal does not affect the lawfulness of processing before withdrawal
• Complaint — lodge a complaint with the South African Information Regulator if you believe we have processed your personal information unlawfully

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

To lodge a complaint with the Information Regulator:

9. Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration or destruction. These measures include:

• Encrypted database connections between the application and the database server
• Access controls that restrict enquiry form submission data to authorised editor and administrator accounts
• Password hashing using bcrypt, an industry-standard one-way cryptographic function
• Session tokens that are stored server-side and expire automatically

Published MenoMove articles and downloadable PDF resources are publicly accessible without authentication, as they are intended for general use.

No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to protecting your personal information to the best of our ability.

10. Children

MenoMove is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us at [email protected] and we will delete it promptly.

11. Changes to this notice

We may update this Privacy and Cookie Notice from time to time. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this notice periodically.

Business Engage Association NPC — Registration number 2005/021365/08
Privacy contact: [email protected]
menomove.africa