🔒
Independent informational resource. This website — srdsassagov.co.za — is not affiliated with, endorsed by, or part of the South African Social Security Agency (SASSA) or any government department.

1. Who We Are

Responsible Party: The operators of srdsassagov.co.za

Website: srdsassagov.co.za

We operate an independent SASSA SRD grant status check tool that helps South African residents verify their SRD R370 application status. We are subject to the Protection of Personal Information Act 4 of 2013 (POPIA) and are committed to protecting your personal information.

2. Contact / Information Officer

All data-related queries, access requests, and complaints may be directed to us:

Email: [email protected]

Address: Gauteng Regional Office, 222 Smit Street, Braamfontein, Johannesburg, 2000

We aim to respond to all privacy inquiries within 5 business days.

3. What Personal Information We Collect

When you use our status check tool, we process the following personal information:

  • South African ID number — your 13-digit national identity number
  • Cellphone number — the 10-digit number registered on your SASSA application
  • IP address — automatically collected to prevent abuse and enforce rate-limiting
  • Device and browser information — collected anonymously for security purposes only (no personal profile is built)
⚠️
Your ID number and cellphone number are transmitted securely over HTTPS and are not stored persistently. They are used solely to query the SASSA status system in real time. Standard, short-lived request logs may be generated for security purposes only.

4. Why We Collect Your Information (Purpose)

We collect your personal information for the following specific purposes only:

  1. Status check query — to retrieve your SRD grant application status on your behalf.
  2. Security and abuse prevention — to detect and block automated scraping, fraud attempts, and system abuse via rate limiting and scoring.
  3. Service improvement — anonymised, aggregated usage analytics to improve performance. No personal profiles are created.

Your information is not sold, not shared with SASSA, and not used for marketing purposes.

5. Legal Basis for Processing

Under POPIA Section 11, we process your personal information on the following grounds:

  • Consent — by submitting the status check form, you consent to your information being used to query the status system on your behalf.
  • Legitimate interest — operating a secure, abuse-free service that functions as intended.

6. How We Share Your Information

Your personal information is shared only as follows:

  • SASSA status system — your ID and phone number are submitted to retrieve your grant status. This is the core function of the tool.
  • Cloudflare — our hosting and security provider processes request metadata (IP, headers) under their own privacy policy. No personal form data is shared with Cloudflare.

We do not sell, rent, or share your personal information with any other third parties.

7. How Long We Keep Your Information

Records are retained only as long as reasonably necessary:

  • ID number and phone number — not stored persistently. Held in memory for the duration of the status query only (typically a few seconds), then discarded.
  • Anonymous usage logs — aggregated, non-identifiable analytics data retained for up to 90 days for service improvement.
  • Security tokens — session-level cryptographic tokens expire within 7 days and contain no personal data.

8. Your Rights Under POPIA

As a data subject under POPIA, you have the following rights:

  • Right to be notified — to know that your personal information is being collected (this policy fulfils that obligation).
  • Right to access — to request what personal information we hold about you.
  • Right to correction — to request that inaccurate information be corrected.
  • Right to deletion — to request that your personal information be deleted.
  • Right to object — to object to the processing of your personal information.
  • Right to lodge a complaint — to lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact us at: [email protected]

9. Information Security

We implement reasonable technical and organisational measures to protect your information:

  • All data transmission is encrypted via HTTPS/TLS
  • Infrastructure is protected by Cloudflare WAF and DDoS mitigation
  • Form submissions use cryptographic nonces (CSRF protection) to prevent replay attacks
  • A bot-detection and rate-limiting system prevents automated abuse
  • No personal data is written to persistent storage

10. Cookies

We use a single first-party security cookie that:

  • Contains a cryptographic hash (no personal data)
  • Expires after 7 days
  • Is used only for security verification and rate limiting
  • Cannot be read by third-party scripts

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

11. Children's Privacy

This service is intended for adults (18 years and older) eligible for the SASSA SRD grant. We do not knowingly collect information from children under 18.

12. Information Regulator Contact Details

If you are not satisfied with how we handle your personal information, you may lodge a complaint with the Information Regulator of South Africa:

  • Website: www.justice.gov.za/inforeg
  • Email: inforeg@justice.gov.za
  • Phone: 010 023 5200
  • Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the service after changes constitutes acceptance of the updated policy.

✅
Questions? Contact us at [email protected]. We aim to respond to all privacy inquiries within 5 business days.