Privacy Policy

We collect personal information in four situations, all of them started by you:

• Contact form: your name, email address, company, phone number, and the message you write, including any budget or service details you choose to share.
• Consultation bookings: your name, email address, and the project details you give us, such as project type, budget range, and timeline.
• Newsletter: your email address.
• Careers applications: your name, email address, the role you are applying for, and a link to your CV or portfolio. We do not host CV files; you share a link and the file stays where you put it.

We also collect limited technical data automatically, such as pages visited and approximate region, through analytics cookies. This is covered in our Cookie Policy. We do not collect special personal information such as health, religious, or biometric data, and the site is not aimed at children.

POPIA requires a lawful basis for each type of processing. Here is what we rely on:

• Responding to your contact form or consultation booking: processing is necessary to take steps at your request before entering into a contract, and in our legitimate interest of responding to enquiries about our services.
• Sending the newsletter: your consent. You can withdraw it at any time using the unsubscribe link in every email.
• Reviewing careers applications: processing is necessary for steps taken at your request with a view to employment.
• Site analytics: our legitimate interest in understanding how the site is used, kept proportionate by collecting only aggregated, low-detail usage data.

We only use your information for the purpose you gave it to us. We do not sell personal information, and we do not use enquiry details for unrelated marketing.

We keep personal information only as long as we need it for the purpose it was collected, or as long as the law requires. The table below sets out our standard retention periods.

If an enquiry turns into a client engagement, the information moves under the retention rules of that engagement's contract and our legal record-keeping duties.

We do not sell or rent personal information. We share it only with service providers who process it on our instructions, called operators under POPIA. Each operator is bound by a written agreement that requires them to protect your information and use it only for the service they provide to us.

• Email and form-handling providers that deliver contact form submissions and consultation requests to our inbox.
• Our newsletter platform, which stores subscriber email addresses and sends our emails.
• Cloud hosting providers that run the website and its infrastructure.
• Analytics providers that process aggregated usage data on our behalf.

We may also disclose information if the law requires it, for example in response to a lawful request from a regulator or court.

Some of our service providers store data outside South Africa, for example on cloud infrastructure in the European Union or the United States. When that happens, section 72 of POPIA applies.

We only transfer personal information across borders where the recipient is subject to laws or binding agreements that give protection substantially similar to POPIA, or where the transfer is necessary to perform something you asked for, such as delivering a newsletter you subscribed to.

Under POPIA you have the right to:

• Ask whether we hold personal information about you, and request a copy of it.
• Ask us to correct or update information that is inaccurate or out of date.
• Ask us to delete your information where we no longer have a lawful reason to keep it.
• Object to processing based on our legitimate interests, and object to direct marketing at any time.
• Withdraw consent where processing is based on consent, such as the newsletter.
• Complain to the Information Regulator of South Africa if you believe we have mishandled your information. The Regulator can be reached at complaints.IR@justice.gov.za or via inforegulator.org.za.

To exercise any of these rights, email hello@entrebyte.com. We will respond within a reasonable time and never charge for a reasonable request. We may ask you to verify your identity first so we do not hand your information to someone else.

POPIA requires appropriate, reasonable safeguards, and we take that seriously as an engineering firm. Our measures include:

• Encryption in transit: all traffic to entrebyte.com uses HTTPS.
• Access control: form submissions and applications are visible only to the team members who need them.
• Vetted operators: we use established providers with their own security programmes and sign processing agreements with them.
• Data minimisation: our forms ask only for what we need, and we do not store CV files on our systems.
• Regular review: we review what personal data we hold and delete what has passed its retention period.

If a data breach ever affects your personal information, we will notify the Information Regulator and affected people as required by section 22 of POPIA.

Entrebyte Technologies (Pty) Ltd is the responsible party for personal information processed through this site. We are based in Johannesburg, South Africa.

For any privacy question, request, or complaint, email hello@entrebyte.com with the subject line 'Privacy'. If we update this policy, the new version will be posted here with a revised date at the top.