Privacy Policy

Depending on the situation, we handle personal information in one of two roles under POPIA. This distinction matters, because different rules and documents apply.

As Responsible Party — when you visit our website, enquire, sign up, subscribe, or when we market to you, we decide how and why your information is used. We are the Responsible Party, and this Privacy Policy governs that information.

As Operator — when you are a Logic Hub customer and you load your own customers' information into the platform (their contacts, bookings, invoices, messages), you are the Responsible Party for that information and we act only as your Operator — processing it on your behalf and on your instructions. That processing is governed by our Terms of Service and Data Processing Addendum (DPA), not primarily by this Policy. We do not use your customers' information for our own purposes.

2.1 Information you give us

• Account and contact details such as name, business name, email, phone number, billing details.
• Communications such as messages you send us by email, WhatsApp, contact forms or when you book a call.
• Agency-project information such as details you share so we can build a website, automation or setup for you.

2.2 Information collected automatically

• Usage and device data such as how you use our website and the platform, IP address, browser and device type, pages visited.
• Cookies and similar technologies — see the Cookies section below.

2.3 Payment information

Payments are processed by our payment provider (PayFast). We do not store your full card details, as these are handled by the payment provider under their own security and privacy terms.

2.4 Customer data inside Logic Hub (Operator role)

Information your business loads into Logic Hub about your own customers is processed by us only as your Operator, as described in section 1. This Policy's rules on our own use do not give us rights over that data.

As the Responsible Party, we process personal information to:

Where we rely on consent (for example certain marketing), you may withdraw it at any time. Every marketing message includes a way to opt out.

• We only send marketing where the law allows, and always with a clear way to opt out (for example "reply STOP" or an unsubscribe link).
• Opting out of marketing does not stop essential service messages (such as billing or account notices), which are part of providing the Services.

We share personal information only as needed to run the Services, with providers who are bound to protect it. Our key providers include:

We may also disclose information where required by law, to protect our rights or safety, or as part of a business transfer (for example a merger or acquisition), subject to appropriate protections.

We do not sell personal information.

Some of our providers process information outside South Africa (for example Supabase hosts platform data in the European Union, in Frankfurt). Where personal information is transferred outside South Africa, POPIA requires appropriate safeguards. We rely on providers that offer a level of protection comparable to POPIA and, where applicable, contractual safeguards (such as data-processing agreements and standard contractual clauses). The details of these safeguards, for data we process as your Operator, are recorded in our Data Processing Addendum.

• We keep personal information only as long as needed for the purposes above, or as required by law (for example tax and accounting records).
• For platform data we process as your Operator: when your subscription ends, we make a data export available and then delete it in the ordinary course, as set out in the DPA.

• We apply appropriate technical and organisational measures, including encryption in transit and at rest, access controls, and secure, reputable hosting.
• Platform data is held in each business's own separated workspace.
• No system is perfectly secure; while we take reasonable steps, we cannot guarantee absolute security. You are responsible for keeping your login credentials safe.

Subject to POPIA, you have the right to:

• Access the personal information we hold about you.
• Ask us to correct or delete information that is inaccurate, irrelevant, excessive or out of date.
• Object to processing in certain circumstances, and to withdraw consent where we rely on it.
• Not be subject to unsolicited electronic marketing, and to opt out at any time.
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact our Information Officer using the details below. If you have a Logic Hub account, some rights (such as access and correction) can be exercised directly in the platform. Where the request concerns your own customers' data that we process as Operator, we will refer it to you as the Responsible Party or assist you in responding.

Our website uses cookies and similar technologies to make the site work, remember your preferences, and understand usage so we can improve. You can control cookies through your browser settings; disabling some cookies may affect how the site works.

The Services are intended for businesses and are not directed at children. We do not knowingly collect personal information from children. If you believe we have, contact us and we will address it.

We may update this Policy from time to time. We will post the updated version here with a new "last updated" date, and where changes are material we will take reasonable steps to notify you. Continued use of the Services after changes take effect means you accept the updated Policy.

For any privacy question, or to exercise your rights, contact our Information Officer:

Growth Logic (Pty) Ltd, Johannesburg, South Africa · info@growthlogic.co.za · WhatsApp via growthlogic.co.za