Privacy Policy

Bukani Tech Solutions (Pty) Ltd (“BTS”, “we”, “us”, “our”) is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). This Privacy Policy explains what information we collect, how we use it, and your rights as a data subject.

By using our website (bukani-tech.co.za) or any of our services, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

Responsible Party (under POPIA): Bukani Tech Solutions (Pty) Ltd
Registration: [REG NUMBER] — to be completed
Information Officer: Sibanye Bukani
Email: privacy@bukani-tech.co.za
Physical address: [STREET ADDRESS], King William’s Town, Eastern Cape, South Africa — to be completed

2. Information We Collect

2.1 Information you provide directly

• Contact form submissions: Full name, business name, email address, phone number, type of service requested, budget range, and your message.
• Newsletter subscriptions: Email address and optional name.
• Client engagements: Business name, billing address, banking details for payment, project information.

2.2 Information collected automatically

• Server logs: IP address, browser type, pages visited, timestamps. These are used for security and troubleshooting and are partially redacted (last octet of IP addresses).
• Analytics (Google Analytics 4): Only collected with your explicit consent via our POPIA cookie banner. Includes page views, session duration, and geographic region (never your precise location). You can decline analytics at any time.
• Cookies: A single consent cookie (popia_consent) to remember your analytics preference. No tracking cookies are set without consent.

3. Purpose of Processing

We process your personal information only for the specific purposes for which it was collected:

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We share it only where necessary:

4.1 Service providers (Operators under POPIA)

• Railway (hosting): Backend infrastructure and database. Servers located in the United States (US-East). Data Processing Agreement in place.
• Vercel (hosting): Blog and admin dashboard hosting. Servers located in the United States. Data Processing Agreement in place.
• Resend / SMTP: Email delivery service. Used only to send emails you have requested.
• Google Analytics: Only if you have consented. Google processes data in accordance with the EU-US Data Privacy Framework.
• Anthropic (Claude API): Used for AI invoice generation features. Content submitted to this feature is processed per Anthropic’s privacy policy.

4.2 Cross-border data transfers

Some of our service providers store data outside South Africa (primarily in the United States and European Union). In accordance with POPIA Section 72, we ensure these transfers are made only to providers that:

• Are bound by a law, binding corporate rules, or a binding agreement providing adequate data protection; or
• Have signed a Data Processing Agreement with BTS.

4.3 Legal requirements

We may disclose your information if required by South African law, court order, or to protect the rights and safety of BTS or third parties.

5. Retention Periods

6. Your Rights as a Data Subject

Under POPIA, you have the following rights:

• Right to access (Section 23): Request a description of the personal information we hold about you.
• Right to correction (Section 24): Request correction of inaccurate, irrelevant, excessive, out-of-date, or misleading information.
• Right to deletion: Request deletion of your personal information (subject to legal retention requirements).
• Right to object (Section 11(3)): Object to the processing of your personal information for direct marketing.
• Right to complain: Lodge a complaint with the Information Regulator of South Africa at www.justice.gov.za/inforeg/.

To exercise any of these rights, contact our Information Officer at privacy@bukani-tech.co.za. We will respond within 30 days.

7. Cookies

We use a minimal cookie approach:

• popia_consent: Stores your analytics consent preference. No expiry — persists until you clear browser data. Required for compliance.
• Google Analytics cookies: Only set after you click “Accept” on our cookie banner. You can withdraw consent at any time by clicking “Manage Cookies” in the footer.

We do not use advertising, tracking, or third-party profiling cookies.

8. Security

We implement appropriate technical and organisational measures to protect your personal information against loss, unauthorised access, alteration, or disclosure. These include:

• HTTPS encryption on all data in transit
• Personal information redacted in server logs
• Access to client data restricted to authorised personnel only
• Regular security reviews and dependency audits

9. Children’s Privacy

Our services are not directed at persons under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with their personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify existing clients of material changes by email. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of our services after any changes constitutes acceptance of the updated policy.

11. Contact Us

For any privacy-related questions, requests, or complaints, contact our Information Officer:

• Name: Sibanye Bukani (Information Officer)
• Email: privacy@bukani-tech.co.za
• WhatsApp: 076 367 4677
• Physical address: [STREET ADDRESS], King William’s Town, Eastern Cape, South Africa

If you are not satisfied with our response, you may contact the Information Regulator of South Africa:
Website: www.justice.gov.za/inforeg/
Email: inforeg@justice.gov.za