Privacy Policy – ImNotAlone

Last Updated: 2025/11/01

1. Who We Are

ImNotAlone is an online support and awareness community for individuals living with migraines, chronic sensitivities, and related conditions.

This website is jointly controlled and managed by:

• Pulse Works (Pty) Ltd
• OneNode (Pty) Ltd

Our website address is https://imnotalone.co.za.

This Privacy Policy explains how we collect, use, protect, and share your personal information in compliance with the Protection of Personal Information Act (POPIA), the General Data Protection Regulation (GDPR), and other international privacy standards.

2. What Personal Data We Collect and Why

Comments

When you leave comments, we collect the data shown in the comments form, as well as your IP address and browser user agent string to detect spam.

An anonymized string created from your email (a “hash”) may be sent to the Gravatar service to confirm use. The Gravatar policy is available at automattic.com/privacy. Once your comment is approved, your profile picture (if linked) is publicly visible.

Media

If you upload images, avoid including embedded location data (EXIF GPS), as others may extract location data from these files.

Cookies

Our site uses cookies to enhance usability and remember preferences.

• Comments may store your name, email, and website in cookies for one year.
• A temporary cookie checks browser compatibility and is deleted when you close your browser.
• Login cookies last two days; screen preference cookies last one year; “Remember Me” extends login to two weeks.
• Editing or publishing content adds a one-day cookie storing the post ID.

You can disable cookies in your browser settings; some features may not function correctly.

Embedded Content

Articles may include embedded content (e.g., videos, images, posts) from external websites. Such content behaves as if you visited the other site directly and may collect data per their privacy policies. We recommend reviewing those policies.

3. How We Use Your Information

• Facilitate community participation and moderation
• Respond to enquiries or support requests
• Maintain and improve website functionality
• Detect and prevent misuse or security risks
• Comply with legal obligations

We do not sell or rent your personal information.

4. Lawful Basis for Processing

Processing is based on:

• Consent – when you submit forms or subscribe
• Contractual necessity – to provide requested services
• Legal obligation – to meet regulatory requirements
• Legitimate interest – to ensure security and usability

You may withdraw consent at any time by emailing privacy@imnotalone.co.za.

5. Who We Share Your Data With

Data may be processed by trusted third-party service providers who help operate our website, host data, or manage communication (e.g., hosting, analytics, anti-spam). All such providers are bound by confidentiality and data protection agreements.

Information may be disclosed to legal authorities if required by law.

6. How Long We Retain Your Data

• Comments and metadata are stored indefinitely to aid moderation.
• Registered users can view, edit, or delete their data (except usernames).
• Inactive or redundant data are periodically deleted following POPIA principles.

7. Your Rights Over Your Data

You have the right to:

• Access the data we hold about you
• Request correction or deletion of data
• Withdraw consent at any time
• Object to processing for specific purposes
• Request data portability (copy/export of your data)

Contact privacy@imnotalone.co.za to exercise your rights. Proof of identity may be required.

8. Where Your Data Is Sent

Visitor comments may be checked via automated spam detection tools. If any data is transferred outside South Africa, it is only sent to jurisdictions with adequate data protection levels consistent with POPIA and GDPR.

9. How We Protect Your Information

• SSL/TLS encryption for secure data transfer
• Secure servers and password-protected admin access
• Regular software updates and malware protection
• Restricted internal access to personal data

While we take reasonable precautions, no system is completely secure. Data is shared at your own discretion.

10. Children’s Privacy

This website is not intended for individuals under 13. We do not knowingly collect data from minors. If you believe we have done so, please contact us to remove it.

11. Updates to This Policy

This policy may be updated from time to time. The “Last Updated” date will always show the latest version. Continued use of the site signifies acceptance of any changes.

12. Contact Information

For privacy-related questions or requests, please contact:

Controlling Entities:
Pulse Works (Pty) Ltd
OneNode (Pty) Ltd
Registered in the Republic of South Africa