DigiForg3 Solutions (Pty) Ltd is committed to protecting your personal information. This policy explains what we collect, why we collect it, how long we keep it, and the rights you have under South Africa's Protection of Personal Information Act (POPIA).
Last updated: 2 October 2026
1. Who we are
The responsible party is DigiForg3 Solutions (Pty) Ltd, registration number 2025/689955/07, with its principal place of business in Johannesburg, South Africa. We operate digiforg3.co.za, the DigiForg3 ecosystem of products, and related services. For privacy-related questions, contact our Information Officer at support@digiforg3.co.za.
2. What this policy covers
This policy applies to personal information collected through our website, contact forms, digital readiness assessment, newsletter and waitlist signups, and any other DigiForg3 service where we act as the responsible party. It does not cover third-party websites or services that we link to.
3. Information we collect
We collect only the personal information we need to respond to you, deliver our services, and keep our systems secure.
Contact and project enquiries. Name, email address, company or organisation, website, service interest, project stage, problem description, desired outcome, budget range, timeline, and any other details you choose to provide.
Digital Readiness Assessment submissions. Optional contact details and your answers to the assessment questions, stored as structured data so we can generate your report and recommended actions.
Newsletter and waitlist signups. Email address, the list or product you subscribed to, and your subscription preferences.
Technical and security logs. IP address, browser type, device type, pages visited, timestamps, and error data. These logs are used for security, fraud prevention, debugging, and performance monitoring.
Cookies and similar technologies. See our Cookie Policy for details on analytics and marketing cookies.
We do not collect special personal information (such as health, biometric, or political data) unless you explicitly provide it and we have a lawful basis to process it.
4. How we use your information
We use personal information only for the purposes for which it was collected:
Responding to enquiries and providing quotes, proposals, or project advice.
Delivering Digital Readiness Assessment results and follow-up recommendations.
Sending newsletters, product updates, and waitlist communications you signed up for.
Operating, securing, and improving our website, products, and services.
Complying with legal obligations, such as tax, accounting, or regulatory requirements.
Enforcing our terms and protecting our rights, property, or users.
We process your information based on consent, contractual necessity, legitimate interest, or legal obligation, depending on the context.
5. How long we keep your information
We retain personal information only for as long as necessary for the purpose it was collected, or as required by law.
Contact enquiries: Up to 24 months after our last interaction with you, unless you request deletion earlier or we enter into a contract that requires longer retention.
Assessment submissions: Up to 24 months, after which we anonymise or delete the record unless you have become a client.
Newsletter and waitlist subscriptions: Until you unsubscribe or the list becomes inactive, plus a short suppression period so we do not accidentally re-add you.
Technical logs: Up to 90 days for routine server and security logs. Security incident-related logs may be retained longer if required for investigation or legal defence.
Accounting and billing records: As required by South African tax and company law, typically 5 years from the end of the relevant financial period.
When retention periods expire, we delete, anonymise, or securely destroy the information.
6. Third-party processors
We use carefully selected service providers to host, secure, and operate our services. These processors process personal information on our behalf and under written agreements that require appropriate security and confidentiality measures.
Cloud infrastructure and database. Lovable Cloud / Supabase — hosting, database, authentication, and serverless functions. Data is stored in secure cloud regions.
Email and transactional communication. We use email service providers to deliver newsletters, assessment results, and waitlist updates. Your email address and message content are shared only for delivery.
Analytics. If you consent to analytics cookies, we use Google Analytics 4, provided by Google, to understand website usage, acquisition and conversion performance. Analytics uses pseudonymous identifiers and is configured not to receive personal information or free text you enter into our forms through custom event properties. You can withdraw consent at any time via .
Payment processors. If and when we process payments, we use PCI-DSS-aware payment providers. We do not store full payment card details on our own servers.
We do not sell, rent, or trade personal information to third parties for marketing purposes.
7. International transfers
Some of our processors may store or process data outside South Africa. In particular, Google may process Analytics data on infrastructure outside South Africa under Google's applicable service and data-processing terms. Where cross-border processing happens, we take steps that are reasonable in the circumstances to ensure the transfer is permitted under POPIA.
8. How we protect your information
We apply a security-by-design approach, including:
Encrypted data in transit using TLS/HTTPS.
Encrypted data at rest where supported by our infrastructure providers.
Role-based access controls and least-privilege principles for our team.
Row-level security and authentication on database access.
Regular dependency updates, automated security scans, and logging of privileged actions.
Input validation, rate limiting, and anti-spam measures on public forms.
No system is completely secure. If you believe your information has been compromised, please contact us immediately.
9. Your rights under POPIA
You have the following rights regarding your personal information:
Right to access. Request confirmation of whether we hold your personal information and a copy of that information.
Right to correction. Request that we correct or update inaccurate or incomplete personal information.
Right to deletion. Request deletion of your personal information where it is no longer needed, you withdraw consent, or processing is unlawful. Legal retention obligations may limit this right.
Right to object. Object to processing based on legitimate interests or direct marketing, including unsubscribing from newsletters at any time.
Right to restrict processing. Request that we limit how we use your information in certain circumstances.
Right to data portability. Request your information in a structured, commonly used, machine-readable format where technically feasible.
Right to lodge a complaint. If you are not satisfied with how we handle your request, you may complain to the South African Information Regulator.
To exercise any of these rights, email support@digiforg3.co.za with the subject line "POPIA Request". We will respond within the timeframes required by law.
10. Cookies and tracking
We use cookies and similar technologies to operate the site, remember preferences, and — with your consent — analyse traffic and marketing performance. For detailed categories and controls, see our Cookie Policy.
11. Children's privacy
Our services are not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data practices. The latest version will always be available at digiforg3.co.za/privacy with the "Last updated" date at the top of the page. Material changes will be communicated where appropriate.
13. Contact us
For privacy questions, data subject requests, or compliance matters, contact our Information Officer:
