Privacy Policy

Deluxify (Pty) Ltd (“Deluxify”, “we”, “us”, or “our”) is a private company registered in South Africa, operating as an AI and technology solutions provider. We are the “Responsible Party” as defined in the Protection of Personal Information Act 4 of 2013 (“POPIA”).

This Privacy Policy applies to all individuals whose personal information we process, including website visitors, clients, prospective clients, and anyone who contacts us or uses our services.

We process personal information in accordance with POPIA (Act 4 of 2013) and the eight Conditions for Lawful Processing:

• Accountability: We are responsible for ensuring compliance.
• Processing Limitation: We only collect what is necessary.
• Purpose Specification: We collect for specific, defined purposes.
• Further Processing Limitation: We do not repurpose data without consent.
• Information Quality: We keep your data accurate and up to date.
• Openness: We are transparent about our processing activities.
• Security Safeguards: We protect your information appropriately.
• Data Subject Participation: You have the right to access and correct your data.

We may collect the following categories of personal information:

• Identity information: Full name, job title, company name
• Contact information: Email address, phone number, physical address
• Payment information: Billing details processed via our payment gateway (we do not store card details)
• Technical information: IP address, browser type, device information, cookies
• Usage data: Pages visited, time on site, referral source
• Communications: Messages, enquiries, support requests sent to us
• Business information: Information shared during strategy calls or project engagements

We do not intentionally collect special personal information (race, health, religion, biometric data).

• To provide, administer, and improve our services
• To communicate with you regarding your enquiries, projects, or bookings
• To process payments and issue invoices
• To send service-related notifications and updates (with your consent)
• To send marketing communications where you have opted in
• To comply with legal and regulatory obligations
• To detect and prevent fraud or misuse of our services
• To analyse website usage and improve user experience
• For AI model training where explicit, separate consent has been obtained

Where automated decisions are made that have a significant effect on you, we will:

• Inform you that automated processing is taking place
• Provide you the right to request human review of any such decision
• Not use your personal data to train third-party AI models without your explicit consent

We comply with South Africa's National AI Policy Framework (August 2024) which emphasises ethical AI, transparency, and privacy protection.

We do not sell your personal information. We may share it with:

• Service providers: Cloud hosting, payment processors, email platforms, all bound by data processing agreements
• Professional advisors: Lawyers, accountants, auditors under confidentiality obligations
• Regulatory authorities: Where required by law or court order

Cross-border transfers: Where personal information is transferred outside South Africa, we ensure adequate protection as required by Section 72 of POPIA.

We retain personal information only as long as necessary. Client engagement data is retained for a minimum of 5 years in compliance with the Companies Act 71 of 2008 and the Tax Administration Act 28 of 2011. Marketing data is retained until you withdraw consent. After the retention period, data is securely deleted or anonymised.

Under POPIA, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention obligations)
• Objection: Object to processing for direct marketing at any time
• Withdraw consent: Where processing is based on consent, withdraw it at any time
• Complain: Lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za

To exercise any of these rights, email us at privacy@deluxify.co.za. We will respond within 30 days as required by POPIA.

We implement appropriate technical and organisational security measures including encrypted data transmission (TLS/HTTPS), access controls, regular security assessments, and staff training. In the event of a data breach that poses a risk to you, we will notify you and the Information Regulator as required by Section 22 of POPIA.

Our website uses cookies to improve your experience. For full details, please refer to our Cookie Policy.

We may update this Privacy Policy from time to time. The most current version will always be published on this page with the effective date. Continued use of our services after any update constitutes acceptance of the revised policy.