Login

Effective date: 15-07-2026 Last updated: 15-07-2026

1. Introduction

DUCAT (“DUCAT”, “we”, “us”, “our”) operates the website ducatweb.co.za (the “Website”) and provides institutional portfolio, trade execution, and reporting workflow solutions to asset managers. We are based in Cape Town, South Africa, and are committed to protecting the privacy of visitors to our Website in accordance with the Protection of Personal Information Act, 2013 (POPIA).

This Privacy Policy explains what information we collect when you visit our Website or interact with our social media pages, how we use it, and your rights in relation to it. By using our Website, you agree to the practices described in this policy.

This policy applies to our public-facing Website and social media presence only. It does not govern our client-facing trading and portfolio management platform, which is subject to separate client agreements and data handling terms.

2. Information Officer

For any questions about this policy or to exercise your rights under POPIA, please contact:

DUCAT Cape Town, South Africa Email: info@ducat.co.za

3. Information We Collect

3.1 Information you provide directly

  • Contact form submissions (name, email address, company, message content)
  • Any information you provide when requesting a demo, product information, or support

3.2 Information collected automatically

  • Standard technical/usage data such as IP address, browser type, device type, pages visited, referring URLs, and time spent on pages
  • Cookies used for basic site functionality and, where applicable, analytics (see Section 5)

3.3 Information from our social media pages

We maintain company pages on LinkedIn, Instagram, and Facebook, and use each platform’s official API (LinkedIn Marketing Developer Platform, Meta Graph API) to retrieve aggregated Page-level analytics for our own reporting purposes — for example, follower counts, post engagement, reach, and impressions.

This data:

  • Relates to our own company Pages, not to individual visitors or followers
  • Is limited to aggregated, anonymized metrics as made available by each platform’s API
  • Is used solely for internal marketing reporting and is not combined with, or used to identify, any individual visitor to our Website
  • Is not sold, shared, or transferred to any third party

If you interact with our social media pages directly (e.g. commenting, messaging, following), that interaction is also governed by the relevant platform’s own privacy policy (LinkedIn, Meta/Instagram, Meta/Facebook), which we encourage you to review.

4. How We Use Your Information

We use the information described above to:

  • Respond to enquiries and provide requested information
  • Operate, maintain, and improve our Website
  • Understand engagement with our social media presence through aggregated analytics
  • Comply with legal obligations where applicable

We do not use the information we collect for automated decision-making that produces legal or similarly significant effects, and we do not sell personal information to third parties.

5. Cookies

Our Website may use cookies to support basic functionality and, where enabled, to gather anonymized usage statistics (e.g. via analytics tools). You can control or disable cookies through your browser settings; note that disabling cookies may affect some Website functionality.

6. Legal Basis for Processing

Where POPIA requires a lawful basis for processing, we rely on one or more of the following:

  • Your consent (e.g. submitting a contact form)
  • Our legitimate business interests (e.g. understanding Website and social media engagement)
  • Compliance with a legal obligation, where applicable

7. Data Sharing

We may share information with:

  • Service providers who support our Website or business operations (e.g. hosting providers), bound to use data only for the purposes we specify
  • Regulators or authorities, where required by law
  • A successor entity in the event of a merger, acquisition, or restructuring

We do not share Website visitor data with LinkedIn, Meta, or any other platform beyond what is inherently required to operate our own company Pages on those platforms.

8. Data Security

We take reasonable technical and organisational measures to protect information we hold against loss, misuse, unauthorised access, disclosure, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law.

10. Your Rights

Under POPIA, you have the right to:

  • Request confirmation of whether we hold personal information about you
  • Request access to, correction of, or deletion of your personal information
  • Object to the processing of your personal information
  • Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at info@ducat.co.za.

11. Children’s Privacy

Our Website is intended for business use by professionals in the asset management industry and is not directed at children. We do not knowingly collect personal information from children.

12. Third-Party Links

Our Website and social media pages may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their respective privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of our Website after changes are posted constitutes acceptance of those changes.

14. Contact Us

If you have questions about this Privacy Policy or how your information is handled, please contact:

DUCAT Cape Town, South Africa Email: info@ducat.co.za

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Suggested text: If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Suggested text: Visitor comments may be checked through an automated spam detection service.