Legal & Privacy
Privacy Policy & POPIA Notice
Deploy Everywhere (Pty) Ltd
Reg: 2023/832934/07
POPIA & PAIA
Republic of South Africa
October 2026
Version 1.0 (Plain Language)
Welcome to Deploy Everywhere. We provide software engineering, custom business platforms, digital product development, and ongoing technical support to businesses across South Africa and globally.
Deploy Everywhere (Pty) Ltd respects your constitutional right to privacy. In accordance with the Protection of Personal Information Act No. 4 of 2013 (“POPIA”) and the Promotion of Access to Information Act No. 2 of 2000 (“PAIA”), this Privacy Policy clearly explains how we collect, process, store, and protect personal information belonging to prospective clients, existing clients, business partners, and website visitors.
1. Company & Information Officer Details
The responsible party under Section 1 of POPIA
Deploy Everywhere (Pty) Ltd is the designated “responsible party” determining the purpose and means of processing personal information collected through our website (https://deployeverywhere.com) and during business engagements.
Deploy Everywhere (Pty) Ltd
2023/832934/07
Durban, KwaZulu-Natal, South Africa
Thobani (Founder & Information Officer)
+27 73 917 4879
2. What Information We Collect
Only what is necessary to serve you
We collect personal information directly from you when you interact with our website, request project scoping, communicate with us, or engage our services. We adhere to the POPIA principle of minimality (s10):
A. Contact & Project Enquiry Details
When you submit an enquiry via our contact form, we collect your name, business email address, company name, project type, estimated budget, and project description.
B. Direct Correspondence & WhatsApp
When you email us, message us on WhatsApp, or participate in discovery video/voice calls, we process your contact information and any project notes, specifications, or feedback shared.
C. Client Invoicing & Commercial Records
When entering into a development agreement, we collect business registration numbers, VAT numbers, billing addresses, signatory names, and bank payment receipts.
D. Technical & Website Usage Data
To deliver a fast, secure website, our servers automatically log technical information such as your IP address, browser user-agent, operating system, and pages visited. We do not use intrusive cross-site tracking cookies or sell your browsing history.
3. Why We Collect It & Lawful Basis
Compliance with Section 11 of POPIA
Under POPIA Section 11, personal information may only be processed if there is a lawful justification. We process your data under the following conditions:
- •Pre-contractual steps (s11(1)(b)): Assessing your requirements, preparing technical quotes, scopes of work, and architecture roadmaps in response to your enquiry.
- •Performance of contract (s11(1)(b)): Building, testing, deploying, and maintaining your custom software systems, websites, web applications, or digital products.
- •Legal obligation (s11(1)(c)): Complying with South African tax laws (SARS), Companies Act statutory accounting, and regulatory directives.
- •Legitimate interest (s11(1)(d)): Ensuring network and information security, preventing fraudulent activity, and managing ongoing engineering operations.
- •Consent (s11(1)(a)): Where you explicitly opt in to receive updates, case studies, or subscribe to any future mailing lists.
4. How Long We Keep It (Retention Periods)
POPIA Section 14 retention limits
In compliance with Section 14 of POPIA, we do not retain personal information for longer than necessary to achieve the purpose for which it was gathered, unless required or authorized by law:
| Data Category | Retention Period | Reason / Statutory Requirement |
|---|---|---|
| General Enquiries (unconverted) | Up to 12 months | To address follow-up queries or recommence scoping if you reach out again. |
| Client Contracts, Invoices & Financials | 5 years | Companies Act 71 of 2008 & Tax Administration Act 28 of 2011 (SARS requirement). |
| Project Communications & Tech Notes | Duration of contract + 24 months | Warranty support, bug resolution, and architectural handover history. |
| Direct Marketing & Outreach Opt-Outs | Indefinitely on suppression list | To ensure that anyone who replied “STOP” is never contacted again. |
Once retention periods lapse, records are either securely deleted, shredded, de-identified, or irreversibly anonymized in accordance with POPIA s14(4).
5. Who We Share It With & Cross-Border Transfers
Trusted sub-processors and POPIA Section 72
We do not sell, trade, or monetize your personal data. We only share personal data with trusted third-party technology providers (“operators”) who assist us in operating our business and delivering our services:
Email hosting, business calendar, and cloud document storage.
Hosting, edge routing, and continuous web application deployment.
Managed database infrastructure and authentication services.
Transactional email delivery for enquiry notifications.
Cross-Border Data Transfer Safeguards (POPIA s72)
Some of our cloud infrastructure providers host servers in the European Union or United States. We ensure that cross-border data transfers comply with Section 72 of POPIA by confirming that all service providers are subject to laws, corporate codes, or binding agreements that offer an adequate level of data protection substantially similar to POPIA (including GDPR compliance and standard contractual clauses).
6. How We Protect Your Data
Technical and organizational security measures (POPIA s19)
As a software engineering studio, we implement rigorous technical safeguards to secure the integrity and confidentiality of personal information under Section 19 of POPIA:
7. Your Rights Under POPIA
Sections 23, 24, and 25 of POPIA
As a data subject in South Africa, you have clear statutory rights regarding how your personal information is handled:
You have the right to request confirmation of whether we hold personal information about you, and to request a copy of that record. (See our PAIA Manual for procedure).
You may request that we correct, update, or destroy personal information that is inaccurate, irrelevant, excessive, outdated, incomplete, misleading, or unlawfully obtained.
You have the right to object to the processing of your personal information on reasonable grounds relating to your particular situation, unless legislation provides for such processing.
Where processing was based on your consent, you may withdraw your consent at any time without impacting prior lawful processing.
To exercise any of these rights, simply email our Information Officer at thobani@deployeverywhere.com. We will respond within 30 days without charging excessive fees.
8. Direct Marketing & Outreach Opt-Out
Compliance with Section 69 of POPIA, UK PECR & CAN-SPAM
Deploy Everywhere respects your inbox. We do not spam. Under POPIA s69:
- •We only send direct outreach to business contacts where we have a reasonable basis to believe our software services are relevant to your business operations.
- •Every electronic outreach message includes clear sender identification, our registered company details, postal address, and a direct link to this Privacy Policy.
- •One-line opt-out: You can opt out at any time by simply replying with “STOP”. Once received, we promptly add your email to our suppression list and will not contact you again.
9. Complaints to the Information Regulator
Your right to escalate under Section 74 of POPIA
If you believe that your personal information has been processed in violation of POPIA, or if you are dissatisfied with how our Information Officer handled your request, we encourage you to contact us first so we can resolve the issue immediately.
However, you always have the right to lodge a formal complaint directly with the official South African supervisory authority:
10. Updates to This Policy
Periodic review and continuous compliance
We may periodically update this Privacy Policy to reflect changes in our software services, regulatory guidance from the Information Regulator, or statutory amendments to POPIA or PAIA.
The latest version will always be published on this page with the effective revision date indicated at the top. For material updates, we will provide additional notice on our website or directly via email.