PeopleGPT

Privacy Notice

How iRunPayroll (Pty) Ltd, trading as IRP Business Solutions, handles personal information collected through PeopleGPT, in line with the Protection of Personal Information Act (POPIA).

1. Who is responsible for your information

The responsible party (the party that decides why and how your personal information is processed) is iRunPayroll (Pty) Ltd. IRP Business Solutions is the trading and brand name under which iRunPayroll (Pty) Ltd operates PeopleGPT. References to “IRP Business Solutions” and “PeopleGPT” on this site, in our forms, and in our communications therefore all refer to the same responsible party, iRunPayroll (Pty) Ltd.

Our Information Officer is Carl Baker.

If you have any questions about this notice or how we handle your personal information, or if you wish to exercise any of your rights, contact us at privacy@irunpayroll.co.za, or by post at iRunPayroll (Pty) Ltd, 298 Stokkiesdraai Street, Devander House, Erasmusrand, 0181.

2. What we collect

When you request a demo or access through our form, we collect the details you provide:

• Your name
• Work email address
• Company name
• Whether you opted in to product marketing
• Basic attribution data (e.g. UTM campaign tags) and the page you submitted from, to understand how you found us

Providing these details is voluntary. However, without them we cannot arrange your demo or respond to your request.

3. Why we use it (purpose)

• To respond to your demo / access request and follow up about PeopleGPT.
• Optional product marketing — only if you ticked the optional opt-in box, we may send you occasional PeopleGPT product updates and related information.

4. Legal basis

We process your information on the basis of your request (you asked us to contact you about a demo), and, for product marketing, on the basis of your consent (the optional opt-in). You can withdraw marketing consent at any time.

5. Who we share it with

We use HubSpot as a processor (operator) to manage and store lead and contact records on our behalf. HubSpot processes this data under our instruction. We do not sell your personal information, and we do not share it for unrelated purposes.

Cross-border transfer: HubSpot may process and store your information outside South Africa (for example in the United States or European Union). Where personal information is transferred across borders, we rely on the safeguards permitted under section 72 of POPIA (including a recipient bound by rules or contractual terms providing an adequate level of protection).

Demo video: our product demo is hosted on YouTube (a Google service) and is loaded only when you choose to play it. When you play it, your device connects to YouTube/Google, which receives your IP address and processes it under Google’s own privacy terms. We use the privacy-enhanced youtube-nocookie.com mode, and no connection to YouTube is made until you click play.

6. Cookies and analytics

We use the LinkedIn Insight Tag (provided by LinkedIn Ireland Unlimited Company, part of Microsoft) on our landing pages to measure how our LinkedIn advertising performs and to build aggregated audience insights. It sets cookies and shares online identifiers, including your IP address and your activity on our pages, with LinkedIn — which are personal information under POPIA.

Consent first: this tag does not load until you accept it via our cookie banner. If you decline, it is not loaded. You can change or withdraw your choice at any time using the “Cookie settings” link in the page footer. (Our demo video, described in section 5, is likewise loaded only when you click play.)

LinkedIn may process this information outside South Africa; where that happens we rely on the section 72 safeguards described above, and LinkedIn processes it under its own privacy policy. Withdrawing consent stops future loading of the tag; any cookies LinkedIn has already set are governed by LinkedIn’s policy and your browser settings.

7. How long we keep it (retention)

• Lead personal information: kept for 12 months from your last interaction with us, then deleted or anonymised.
• Marketing suppression list: if you unsubscribe, we keep a minimal record for the life of the channel so we can honour your opt-out.
• Consent audit record: retained for 3 years after deletion of the underlying record, to demonstrate that consent was properly obtained.

8. Your rights

Under POPIA you have the right to:

• Access the personal information we hold about you;
• Ask us to correct or update it;
• Ask us to delete it;
• Object to receiving direct marketing at any time (section 11(3) of POPIA);
• Lodge a complaint with the Information Regulator (South Africa).

To exercise any of these rights, contact us at the email address in section 1.

Information Regulator (South Africa) — Complaints: inforegulator.org.za, email complaints.IR@inforegulator.org.za.

9. How to opt out

Every marketing message includes an unsubscribe link. You can also opt out at any time by contacting us directly. We don’t contact people who haven’t asked us to, and we act on opt-out requests promptly.

10. Not affiliated with Sage

PeopleGPT is an independent product of IRP Business Solutions and is not affiliated with, authorised, sponsored, or endorsed by Sage. PeopleGPT answers from documentation only and does not access, ingest, or store client payroll or employee data.

Last updated: 23 July 2026