Privacy Policy
Data Inc (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal information. This policy explains what we collect, why we collect it, how we protect it, and the rights you have under the Protection of Personal Information Act, 2013 (POPIA). It applies to www.data-inc.co.za and all services offered through it.
1. Who is responsible for your information
Responsible party: Data Inc, South Africa
Information Officer: Juan Nieuwoudt
Contact: connectme@data-inc.co.za
Data Inc is the “responsible party” as defined in POPIA. Our Information Officer handles all questions, requests, and complaints about your personal information.
2. What we collect and why
| Information | When we collect it | Why we need it |
|---|---|---|
| Name, surname, work email, company name, phone number | When you create an account or request a quote | To identify you, prepare and deliver your quote, and communicate with you about your request |
| Quote details (headcount, selected bundles, pricing) | When you configure a quote | To produce your quotation and, if you proceed, to deliver the services |
| Account credentials (password) | When you create an account | To secure your account. Passwords are stored hashed — we can never read them |
| Session data (login cookies) | While you are signed in | To keep you securely signed in (strictly necessary) |
We collect this information directly from you, only for the purposes above, and we collect no more than we need (data minimisation). We do not sell or rent your personal information to anyone.
3. Lawful basis for processing
We process your personal information because:
- you have consented — by accepting this policy when you create an account or submit a quote;
- processing is necessary to provide the service you requested — we cannot prepare a quote without your contact details; and
- we have a legitimate interest in responding to enquiries you send us.
4. Cookies
We use only essential cookies:
| Cookie | Purpose | Type |
|---|---|---|
| Supabase auth session cookies | Keep you securely signed in | Strictly necessary |
| cookie_consent | Remembers that you accepted our cookie notice | Strictly necessary |
We do not use advertising, tracking, or third-party analytics cookies. Because we only use cookies that are strictly necessary for the site to work, they cannot be disabled — but they contain no marketing or profiling data.
5. Who we share information with
We use a small number of trusted service providers (“operators” under POPIA) to run this platform. They process your information on our instructions only:
- Supabase — secure database and authentication hosting (servers in the European Union, Frankfurt)
- Vercel — website hosting and content delivery
Because our database is hosted in the EU, your information is transferred outside South Africa. POPIA (section 72) permits this because the EU provides an adequate level of protection substantially similar to POPIA, and our providers are bound by data-processing agreements.
Beyond these providers, we only disclose personal information if the law requires it or you ask us to.
6. How we protect your information
- All traffic is encrypted in transit (HTTPS/TLS) and data is encrypted at rest
- Row-level security ensures you can only ever access your own data
- Passwords are hashed with industry-standard algorithms and never stored in plain text
- Administrative access is restricted, authenticated, and limited to what is necessary
- Security headers (HSTS, CSP, frame protection) are enforced on every page
7. How long we keep it
We keep your account information for as long as your account is active. Quote records are kept for up to 5 years for business and tax-record purposes, after which they are deleted or anonymised. You may ask us to delete your account and personal information at any time (see section 8).
8. Your rights under POPIA
You have the right to:
- Access — ask what personal information we hold about you and receive a copy
- Correction — ask us to correct or update inaccurate information
- Deletion — ask us to delete your personal information
- Objection — object to processing, or withdraw consent you previously gave
- Complaint — lodge a complaint with the Information Regulator
To exercise any of these rights, email our Information Officer at connectme@data-inc.co.za. We respond within a reasonable time and at most within the periods POPIA prescribes.
Information Regulator (South Africa)
Website: inforegulator.org.za
Email: enquiries@inforegulator.org.za · Complaints: POPIAComplaints@inforegulator.org.za
9. Data breaches
If a security compromise affecting your personal information occurs, we will notify the Information Regulator and affected users as soon as reasonably possible, as required by section 22 of POPIA.
10. Children
Our services are aimed at businesses and are not intended for children under 18. We do not knowingly collect personal information from children.
11. Changes to this policy
If we make material changes to this policy, we will update the date at the top of this page and, where appropriate, notify you by email or a notice on the site. Continued use of the site after changes take effect constitutes acceptance of the updated policy.