Privacy notice
Last updated: 16 July 2026
This portal is operated by TCG Digital Forensics to receive and assess reports concerning suspected unauthorised PayJoy software-removal or circumvention activity.
Information collected
We collect the incident details and evidence links you submit, together with your name, email address, optional telephone number, organisation and relationship to PayJoy. We also retain limited security information, including a protected hash derived from the submitting network address and records showing that the supplied email address was verified.
Purpose
The information is used to validate, assess, investigate and document suspected platform abuse, fraud, impersonation, intellectual-property infringement or software circumvention; to contact you for clarification; and, where justified, to support reporting, legal or enforcement action. It is not used for direct marketing.
Access and disclosure
Operational access to the Notion investigation register is currently restricted to the designated TCG Digital Forensics investigator. Relevant information may be shared only where reasonably necessary with authorised PayJoy representatives, service providers supporting the secure portal, affected online platforms, legal advisers, regulators or law-enforcement authorities. Access is limited according to investigative need.
Retention
Reports are retained only for as long as reasonably necessary for investigation, evidential, contractual, legal or enforcement purposes. Records that are no longer required will be securely deleted or de-identified, subject to any lawful preservation requirement. Expired one-time verification codes cannot be reused and verification records are kept only for security and audit purposes.
Storage and safeguards
Reasonable technical and organisational safeguards are used to protect the information. The portal uses vetted cloud services, including Cloudflare, Notion and the email-verification provider; this may involve secure processing or storage outside South Africa subject to appropriate safeguards.
Your choices and rights
Supplying a report is voluntary, but required fields are needed to assess and follow up the matter. Subject to applicable law, you may ask whether we hold your personal information and request access, correction, deletion, restriction or objection to processing. Contact security@gridharbour.work. You may also lodge a complaint with South Africa's Information Regulator.