Privacy Policy

We collect personal information that is necessary for providing software development, design, and consulting services. This includes:

• Contact Information: Name, email address, phone number, and physical address
• Enquiry Information: Information you voluntarily provide when submitting a contact form on our website
• Business Information: Company name, registration number, and business requirements
• Technical Information: IP addresses, browser type, and device information when you visit our website
• Project Information: Technical specifications, code, and business data shared during engagements
• Financial Information: Banking details and payment information for invoicing

We process your personal information based on one or more of the following grounds:

• Contract Performance: Processing is necessary to perform our contractual obligations to you
• Legal Obligations: Processing is required to comply with applicable laws and regulations
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided your rights are not overridden
• Consent: Where you have given explicit consent for a specific purpose

We use your personal information for the following purposes:

• To provide software development, design, and consulting services
• To communicate with you about projects, invoices, and service delivery
• To comply with legal obligations, including tax and regulatory requirements
• To protect our intellectual property rights and enforce our agreements
• To improve our services and website experience

We do not sell, rent, or trade your personal information to third parties.

We may share your personal information only in the following limited circumstances:

• Service Providers: Trusted third-party providers including cloud hosting (Google Cloud, Firebase), email delivery (SendGrid), analytics (Google Analytics, PostHog), and payment processing, all bound by confidentiality agreements
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of business assets, with prior notice to you

All third-party recipients are required to maintain the confidentiality and security of your personal information.

We implement appropriate technical and organisational measures to protect your personal information against:

• Unauthorised access, disclosure, or loss
• Destruction or damage
• Processing that violates POPIA or our agreements

These measures include industry-standard encryption, role-based access controls, secure software development practices, cloud security controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

In the event of a data breach involving your personal information, we will:

• Take immediate steps to contain the breach and limit its impact
• Notify the Information Regulator if required by law
• Notify you without unreasonable delay if the breach poses a risk to your interests
• Provide information about the nature of the breach and steps you can take to protect yourself

Under the Protection of Personal Information Act, you have the right to:

• Access: Request confirmation of whether we hold your personal information and obtain a copy
• Correction: Request correction or deletion of inaccurate or incomplete information
• Deletion: Request deletion of your personal information where there is no lawful or justified reason for us to continue retaining it
• Objection: Object to the processing of your personal information in certain circumstances
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing
• Complaint: Lodge a complaint with the Information Regulator if you believe your rights have been violated

To exercise these rights, contact us using the details provided below. We will respond to your request within a reasonable time, typically within 30 days.

In accordance with the Promotion of Access to Information Act (PAIA), we have compiled a PAIA Manual. You may request access to this document and our record-request procedures by contacting our Information Officer.

Cookies are small text files stored on your device that help our website function, remember your preferences, and enable analytics.

We request your consent to use analytics cookies when you first visit our website. We use Google Analytics 4 and PostHog to understand how visitors interact with our platform. Analytics data is collected in an aggregated and pseudonymised form to help us improve our services. This information is used to:

• Analyze website traffic and user behaviour
• Improve website functionality and user experience
• Generate statistical reports about website activity
• Understand which pages and features are working well, using anonymised session recordings that mask all form field input

You can manage cookie preferences via your browser settings, or choose to opt out of Google Analytics tracking entirely by installing the Google Analytics Opt-out Browser Add-on. Declining analytics cookies (or later withdrawing consent via "Cookie Preferences" in the footer) prevents both Google Analytics and PostHog from loading or recording your visit.

We do not use cookies for profiling, advertising, or marketing purposes.

We retain your personal information only as long as reasonably necessary to fulfill the purposes for which it was collected, including:

• For the duration of our business relationship and as required by tax, accounting, or legal obligations
• As required by law or regulatory obligations
• To resolve disputes and enforce our agreements

When personal information is no longer needed, we will securely delete or anonymise it.

We are based in South Africa and primarily process personal information within South Africa. However, some of our service providers, including cloud hosting and infrastructure providers such as Google Cloud and Firebase, operate internationally. Where personal information is transferred outside South Africa, we take reasonable steps to ensure appropriate safeguards are in place:

• The receiving country has adequate data protection laws, or
• We have obtained your consent, or
• There is a legally binding agreement ensuring adequate protection

We may use AI-assisted development and productivity tools as part of our engineering workflow. We do not intentionally submit confidential client information or source code to public AI services unless authorised by the client or appropriate contractual safeguards are in place.

Our services are intended for businesses and professionals and are not directed at children under the age of 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on our website with a new effective date
• Sending you an email notification if you are an existing client

We encourage you to review this Privacy Policy periodically.

We believe privacy is a fundamental part of professional software engineering. We collect only the information necessary to provide our services, protect it using appropriate security measures, and never sell your personal information.

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal information, please contact us:

For complaints about our data handling practices, you may contact the Information Regulator of South Africa at inforegulator.org.za.