If 'Yes', explain the general types. Users need to know if cookies are just for site function (essential), tracking usage (analytics), or showing targeted ads (marketing/tracking). Briefly mention purpose and if users have control (e.g., via a cookie banner or browser settings).

If 'Yes' to sharing, list the *types* or *categories* of third parties (e.g., 'Payment Processors', 'Marketing Automation Platforms', 'Cloud Service Providers', 'Delivery Partners', 'Professional Advisors', 'Governmental Authorities'). Explain *why* you share with each category (e.g., 'to process payments', 'to store data securely', 'to send newsletters'). You generally don't need to list exact company names.

If 'Yes', POPIA requires safeguards. Explain how you ensure protection. Common methods include: confirming the recipient country has adequate laws (like the EU's GDPR), using approved Standard Contractual Clauses (SCCs) with the provider, or obtaining explicit user consent for the transfer.

If you use data for direct marketing (email, SMS), POPIA requires an easy way for users to opt-out (unsubscribe). Explain how they can do this (e.g., 'Click the unsubscribe link at the bottom of our marketing emails', 'Reply STOP to SMS messages', 'Contact our Information Officer').