Privacypolicy.

Who we are

Synthik is the responsible party for personal information processed through synthik.co.za and in providing our services. Our details are below. Our information officer is Dillon Wernich, who you can contact on any privacy matter.

The short version

• This website sets no tracking cookies, runs no third-party analytics and shows no ads.
• We only collect personal information you choose to give us, mainly through the enquiry form, e-mail, phone or WhatsApp.
• We use it to reply to you and, if you become a client, to deliver and invoice our services. We never sell it or add you to a mailing list without your consent.

Information we collect

When you contact us

When you use the enquiry form we collect your name, e-mail address and message, and, if you choose to give them, your phone number, company, the type of project, your budget range and timeline. We also record that you agreed to this policy and the page you sent the form from. If you e-mail, phone or WhatsApp us, we receive the details you share in that conversation.

When you become a client

To deliver a project we may process contact details of you and your staff, billing and company details, project content you send us, and access credentials to accounts we work on for you. Where we build or host software for you, we may process personal information of your customers or users on your behalf; in that case you are the responsible party and we act as your operator under a written agreement (see Operators and client data).

When you browse this site

Our hosting provider, Google Firebase Hosting, automatically processes technical data such as your IP address, browser type and the pages requested, to deliver the site securely and prevent abuse. We do not use this data to identify or profile visitors.

Why we use it

We only process information that is adequate, relevant and not excessive for these purposes. We do not make automated decisions about you.

Cookies and local storage

This website does not set cookies. It stores one setting in your browser’s local storage, synthik-theme, to remember whether you chose light or dark mode. This never leaves your device and you can clear it in your browser settings at any time. Fonts, images and video are served from our own hosting, so viewing pages sends no data to font or media networks.

Who we share it with

We share personal information only with service providers who help us run the business, under terms that require them to keep it secure and confidential:

• Web3Forms delivers enquiry form submissions to our inbox. See the Web3Forms privacy policy.
• Google (Firebase Hosting) hosts this website. See Firebase privacy and security.
• Domains.co.za hosts our synthik.co.za mailboxes, in South Africa.
• WhatsApp (Meta), if you choose to message us there.
• Our accountant or bookkeeper, for invoices and tax records.

We may also disclose information where the law requires it, for example to SARS or in response to a lawful court order.

Cross-border transfers

Some of the providers above store data on servers outside South Africa, for example in the United States or the European Union. Under section 72 of POPIA we only use providers that are bound by laws, binding corporate rules or agreements that give a level of protection substantially similar to POPIA. By using the enquiry form you also consent to this transfer for the purpose of replying to you.

How long we keep it

• Enquiries that do not become projects: deleted within 12 months of our last contact.
• Client and invoicing records: kept for at least five years from the date the related tax return is submitted, as required by the Tax Administration Act 28 of 2011.
• Project files and credentials: returned or deleted at the end of the engagement, unless we have agreed to keep supporting the project.

How we protect it

We take appropriate, reasonable technical and organisational measures to prevent loss, damage and unauthorised access, as required by section 19 of POPIA. These include measures such as encrypted connections (HTTPS with HSTS), two-factor authentication on all accounts that hold personal information, least-privilege access, encrypted devices and password managers for credentials. If a security compromise affects your personal information, we will notify you and the Information Regulator as required by section 22.

Operators and client data

Where we build, host or maintain software that processes personal information of your customers or staff, you remain the responsible party and Synthik acts as your operator under section 21 of POPIA. We process that information only on your documented instructions, keep it confidential, apply the security measures above and tell you without delay if we suspect a compromise. We are happy to sign your data processing agreement.

Your rights

Under POPIA you have the right to:

• ask whether we hold personal information about you and request a copy of it (s23);
• ask us to correct, update or delete information that is inaccurate, out of date, excessive or unlawfully obtained (s24);
• object to processing on reasonable grounds, and withdraw consent at any time (s11);
• object to direct marketing at any time (s11(3)(b) and s69); and
• lodge a complaint with the Information Regulator.

To exercise any of these rights, e-mail info@synthik.co.za. We may ask you to verify your identity, and we will respond within a reasonable time and no later than 30 days. Formal requests for records can also be made under our PAIA manual.

Children

Our website and services are aimed at businesses and adults. We do not knowingly collect personal information of children under 18 without the consent of a competent person.

Changes to this policy

If we change how we handle personal information, for example by adding analytics, we will update this page and the date at the top before the change takes effect.