GOOLTECH Privacy Policy
Last updated: 1 June 2026
Compliant with the Protection of Personal Information Act, 2013 (POPIA).
1. Who we are
GOOLTECH (Pty) Ltd is the responsible party. Our Information Officer is Founder / Information Officer, contactable at privacy@gooltech.co.za.
2. What we collect
Identity and contact details; business details; project request information and uploaded assets; account and billing data; support and message content; usage and device data; and cookies.
3. Why we collect it
To respond to requests, deliver and manage services, process payments, provide support, comply with law, and — with consent — send marketing.
4. Consent
We capture explicit consent when you submit a request and log it. You may withdraw consent at any time.
5. Who we share with
Hosting and infrastructure (Vercel, Supabase, Cloudflare), email (Resend), payments (Stripe, Yoco, PayFast), AI (Anthropic, OpenAI), messaging (Meta/WhatsApp), and analytics (PostHog). Each processes data under contract and only as instructed.
6. Cross-border transfers
Some processors store data outside South Africa. Where this occurs, we rely on consent and/or contractual safeguards as permitted by POPIA s.72. We host primary data in the EU region.
7. Retention
Project request data is retained for 24 months after last activity; financial records for 5 years per tax law; then deleted or anonymised.
8. Your rights
Access, correction, deletion, objection, and complaint to the Information Regulator. Manage or export your data at /dashboard/settings, or contact our Information Officer.
9. Security
We apply technical and organisational safeguards. No method is perfectly secure; we notify affected parties and the Regulator of material breaches as required.
10. Children
The Services are not directed at children under 18.
11. Updates
We will post changes here with a new "last updated" date.
Information Regulator (South Africa)
https://inforegulator.org.za