Legal

Privacy Policy

Effective 20 October 2026

Country Risk 360 (“CR360”) is a trading name and digital product operated by Skylaw Legal (Pty) Ltd, registration number 2021/816322/07, South Africa. This Privacy Policy explains how personal information is processed when you visit countryrisk360.com, purchase a CR360 product or communicate with us.

1. Information we may collect

We may collect information you provide directly, including your name, email address, organisation name, billing or order information, support enquiries and other information you choose to send us.

When you use the website, we may also process ordinary technical and usage information such as IP address, browser and device information, requested pages, timestamps, session identifiers, security logs and similar diagnostic information.

For purchases, we process transaction information such as the product purchased, amount, currency, payment status, transaction reference and delivery status.

2. Payment information

Payments are processed through a third-party payment service provider. Full card or payment-credential information is processed by the payment provider and is not intended to be stored by CR360. We may receive limited payment and transaction information needed to verify payment, deliver the purchased product, process refunds and maintain accounting and fraud-prevention records.

3. Why we use personal information

We use personal information to operate and secure the website; process and verify purchases; deliver reports and Global packages; provide customer support; respond to enquiries and disputes; detect fraud and misuse; maintain business, tax and accounting records; improve the service; enforce our Terms; and comply with legal or regulatory obligations.

Where required, we may rely on consent. We may also process information where necessary to perform a contract, comply with law or pursue legitimate business interests in a manner consistent with applicable data-protection law.

4. Sharing of information

We do not sell personal information. We may share information with service providers that support payment processing, hosting, cloud infrastructure, email, security, analytics, accounting, professional advice and similar operational functions, but only to the extent reasonably necessary for those services.

We may also disclose information where required by law, legal process, regulatory authority or court order, or where reasonably necessary to establish, exercise or defend legal rights, investigate fraud or protect the security of CR360, its users or others.

5. Cross-border processing

Some service providers or technical infrastructure may process information outside South Africa. Where personal information is transferred across borders, we take reasonable steps to use arrangements that are consistent with applicable South African data-protection requirements.

6. Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including order fulfilment, support, security, accounting, tax, dispute management and legal compliance. Different categories of information may therefore be retained for different periods.

When information is no longer reasonably required, it may be deleted, de-identified or securely archived where continued retention is legally justified.

7. Security

We use reasonable technical and organisational safeguards designed to protect personal information against loss, misuse, unauthorised access, alteration or disclosure. No website, network or storage system can be guaranteed to be completely secure.

8. Cookies and local browser storage

CR360 may use essential cookies or similar browser technologies for functions such as session management, security and maintaining website state. If non-essential analytics, advertising or similar tracking technologies are introduced, this Policy and any required consent mechanism will be updated accordingly.

9. Your rights

Subject to applicable law, you may request access to personal information we hold about you, ask for inaccurate information to be corrected, object to certain processing, request deletion or restriction where legally available, or ask questions about how your information is used.

You may also lodge a complaint with the Information Regulator of South Africa if you believe your personal information has been processed unlawfully.

10. Marketing communications

We will not treat a purchase as unlimited consent to marketing. Where we send promotional communications, we will do so in accordance with applicable law and provide an appropriate way to opt out of future marketing communications.

11. Children

CR360 is a professional compliance and business-information product and is not intended for use by children.

12. Third-party websites

The website or reports may refer or link to external sources and third-party websites. Their privacy practices are controlled by those third parties and are not governed by this Policy.

13. Changes to this Policy

We may update this Privacy Policy when our services, technology, providers or legal obligations change. The effective date above will be updated when material changes are made.

14. Contact

Privacy questions and requests may be sent to [email protected].