Privacy Policy

1. Introduction

Flowgrid (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. This policy complies with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African data protection laws.

By using our website and services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Contact Information: Name, email address, and any other information you provide through contact forms
• Account Information: If you create an account, we collect login credentials and profile information
• Communication Data: Information from emails, support tickets, and other communications with us
• Project Information: Details about your business and project requirements when requesting services
• Payment Information: Billing address and payment details (processed securely through third-party payment processors)

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages viewed, time spent on pages, links clicked, referring website
• Location Data: General geographic location based on IP address
• Cookies and Similar Technologies: See Section 6 for more information

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our web development and digital services
• Communication: To respond to inquiries, send service updates, and provide customer support
• Business Operations: To process payments, manage accounts, and fulfill contractual obligations
• Marketing: To send newsletters, promotional materials, and service announcements (with your consent)
• Analytics: To understand how our website is used and improve user experience
• Legal Compliance: To comply with legal obligations and protect our legal rights
• Security: To detect, prevent, and address technical issues and fraudulent activity

4. Legal Basis for Processing (POPIA Compliance)

Under POPIA, we process your personal information based on the following lawful grounds:

• Consent: You have given explicit consent for processing your personal information
• Contractual Necessity: Processing is necessary to fulfill our contract with you
• Legal Obligation: Processing is required to comply with South African law
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided your rights are not prejudiced

5. Information Sharing and Disclosure

5.1 Third-Party Service Providers

We may share your information with trusted third-party service providers who assist us in:

• Website hosting and maintenance
• Email delivery and marketing automation
• Payment processing
• Analytics and performance monitoring
• Customer relationship management

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Court orders or legal processes
• Requests from law enforcement or government authorities
• Protection of our rights, property, or safety
• Detection and prevention of fraud or security issues

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and provide options regarding your information.

5.4 With Your Consent

We may share your information with third parties when you have given explicit consent to do so.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small data files stored on your device that help us remember your preferences and understand how you use our site.

Types of Cookies We Use:

• Essential Cookies: Required for website functionality and cannot be disabled
• Analytics Cookies: Help us understand how visitors interact with our website
• Preference Cookies: Remember your settings and preferences (e.g., theme selection)
• Marketing Cookies: Track your browsing habits to deliver relevant advertisements

You can control cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (SSL/TLS)
• Secure data storage with access controls
• Regular security assessments and updates
• Employee training on data protection
• Secure authentication mechanisms

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining retention periods, we consider:

• The nature and sensitivity of the information
• Potential risk from unauthorized use or disclosure
• The purposes for which we process your information
• Legal, accounting, and regulatory requirements

Once information is no longer needed, we securely delete or anonymize it.

9. Your Rights Under POPIA

As a data subject under POPIA, you have the following rights:

• Right to Access: Request copies of your personal information we hold
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Deletion: Request deletion of your personal information (subject to legal obligations)
• Right to Object: Object to processing of your personal information for certain purposes
• Right to Restriction: Request restriction of processing under certain circumstances
• Right to Data Portability: Receive your information in a structured, commonly used format
• Right to Lodge a Complaint: File a complaint with the Information Regulator of South Africa

To exercise any of these rights, please contact us at info@flowgrid.co.za. We will respond to your request within 30 days as required by POPIA.

10. Third-Party Links

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

12. International Data Transfers

Your information may be transferred to and processed in countries other than South Africa. While we ensure that adequate safeguards are in place, data protection laws in other countries may differ from South African law. By using our services, you consent to such transfers.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the “Last updated” date at the top of this page
• Sending an email notification for significant changes (if we have your email address)

Your continued use of our services after changes are posted constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Information Regulator Contact:

If you are not satisfied with our response, you may lodge a complaint with the Information Regulator: