Who is responsible
This policy explains what personal information Altokoda collects, why, and what your rights are under the Protection of Personal Information Act (POPIA). It covers altokoda.com.
Altokoda (Pty) Ltd is responsible for your personal information. Our Information Officer can be reached through our support form or by email at [email protected].
What we collect
When you contact us or hire us: your name, email address, phone number, company name, and what you tell us about your project.
When you pay us: Payfast processes your payment and collects your card or bank details on its own pages. We don't see or store them. We receive confirmation of the payment, and keep the billing records we need.
When you visit our websites: we use Cloudflare Web Analytics, which counts visits without cookies and without identifying you.
When you send a form: our contact and support forms use Cloudflare Turnstile, which checks that a person is sending the form. To do this, Cloudflare processes technical information about your browser and connection.
Why we use it
- To provide our services: carry out the work you've hired us for.
- To contact you about your enquiry or project. We don't send marketing without your consent.
- To keep our services secure: prevent abuse and fraud.
- To meet legal duties: for example, keeping financial records for tax purposes.
Who we share it with
We share personal information only with providers that help us run our services, and only what each one needs:
- Cloudflare: hosting our websites, website analytics, and spam protection on our forms. Its global network includes locations outside South Africa.
- Zoho Mail: our email.
- Resend: delivering messages from our contact and support forms to our inbox.
- Payfast: processing online payments.
We don't sell personal information, and we don't share it for advertising.
Some providers store information outside South Africa. Where they do, we rely on their contractual and legal protections to keep it to a standard comparable to POPIA, as section 72 of POPIA requires.
Cookies
Our websites set no tracking cookies.
How long we keep it
- Enquiry and project information: as long as we need it for your enquiry or project. Ask us to delete it and we'll do so within 30 days, except what we must keep by law.
- Billing records: 5 years, as South African tax law requires.
Security
We protect your information with encryption in transit, strict access controls, and security built into our software from the start. No system is perfectly secure, but if a breach affects your information, we'll tell you and the Information Regulator as POPIA requires.
Your rights
Under POPIA, you can:
- ask what personal information we hold about you, and get a copy
- ask us to correct or delete it
- object to how we use it
- withdraw consent where we rely on it
Send your request through our support form or by email at [email protected]. We'll respond within 30 days. If you're not satisfied, you can complain to the Information Regulator of South Africa: inforegulator.org.za.
Changes
We'll post any changes here with a new date.