Privacy Policy

DigiFellow PTY Ltd ("DigiFellow", "we", "our") respects your privacy. This policy explains what personal information we collect when you visit digifellow.co.za or engage our services, how we use it, and your rights under applicable data protection law — including South Africa's Protection of Personal Information Act (POPIA) and, where relevant, the UK and EU General Data Protection Regulation (GDPR).

Who we are

DigiFellow PTY Ltd is a private company registered in the Republic of South Africa (CIPC registration number K2023/770750/07), with its registered office at 13 Kirschner Road, Benoni, Gauteng. For the purposes of POPIA and GDPR, DigiFellow is the responsible party / data controller in respect of personal information collected through this website and in the course of providing services.

What information we collect

Information you provide directly

• Contact details — name, email address, phone number, and anything you include in the message body when you use the contact form, WhatsApp, or email us.
• Project information — details about your business, technical environment, and project requirements that you share during scoping, proposals, or ongoing work.
• Billing details — company name, VAT number, and billing address, where we have a contracted engagement.

Information collected automatically

• Technical log data — IP address, browser type, device type, and referring URL, captured by our hosting provider for security and abuse prevention.
• Analytics — aggregated, anonymised traffic data via privacy-respecting analytics to understand which pages are useful. We do not create user profiles or track you across other websites.
• Cookies — see the Cookies section below.

How we use your information

We process your personal information only for the following purposes:

• Responding to enquiries and providing quotes or proposals.
• Delivering services under an engagement contract — development, consulting, support.
• Sending invoices and managing payments.
• Complying with legal obligations (tax, VAT, company-law record-keeping).
• Securing the website and detecting abuse.

Our lawful basis for processing is one or more of the following: your consent, the performance of a contract with you, our legitimate interests in running a small professional practice, and legal obligations we are subject to.

Who we share your information with

We do not sell, rent, or trade your personal information. We only share it with third parties who help us operate the business, and only to the extent they need it:

• Hosting and email providers — to operate the website and send/receive correspondence.
• Our accountant — for invoicing, VAT, and tax compliance.
• Cloud infrastructure providers (e.g. AWS, Cloudflare) — where your project data is hosted under your instructions as part of a service engagement.
• Regulatory authorities — where required by law (e.g. SARS for tax, CIPC for company records).

Where a provider is located outside South Africa or the EEA, we rely on the provider's contractual safeguards (Standard Contractual Clauses or equivalent) for cross-border transfers.

How long we keep your information

We retain personal information only for as long as is reasonably necessary for the purposes listed above. In practice:

• Enquiries that do not become engagements — deleted within 12 months of last contact.
• Client records and contracts — retained for at least 5 years after the end of the engagement, to comply with tax and contractual record-keeping obligations.
• Invoices and financial records — retained for the statutory period required under South African tax law (currently 5 years).

Cookies

This website uses only the cookies strictly necessary for it to function (for example, session identifiers). We do not use third-party advertising cookies or cross-site tracking. If we introduce optional cookies (for example, for analytics) in future, we will ask for your consent first via a cookie banner.

Your rights

Under POPIA and GDPR (where applicable), you have the right to:

• Know what personal information we hold about you and receive a copy of it.
• Ask us to correct inaccurate information or complete incomplete information.
• Ask us to delete your information where we no longer have a lawful reason to keep it.
• Object to, or restrict, certain kinds of processing.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with a supervisory authority — in South Africa, the Information Regulator.

To exercise any of these rights, email us at [email protected]. We'll respond within a reasonable period — ordinarily within 30 days.

Security

We take reasonable and appropriate technical and organisational measures to protect personal information against unauthorised access, loss, or misuse — including encrypted connections (HTTPS), access controls on hosting infrastructure, and principles of least privilege for any systems that store client data. No system is perfectly secure, but we take our responsibility here seriously, and as a Laravel specialist, we apply the same security rigour to our own systems as we do to client work.

Changes to this policy

We may update this policy from time to time — for example, if we introduce new tools or our legal obligations change. The "Last updated" date at the top of this page will always reflect the latest version. Material changes will be communicated directly to active clients.

Contact us

For any privacy-related question, request, or complaint: