Privacy Policy

1. Introduction

SMARKIT ("SMARKIT", "we", "us", or "our") provides IT support, web design, digital marketing, POS systems, custom software, and graphic design services to small businesses in South Africa. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit smarkit.co.za (the "Site") or engage us for services, in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA").

By using our Site or our services, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our Site or services.

2. Information We Collect

We may collect the following categories of personal information:

• Contact details you submit through our consultation form or newsletter signup: name, business email, phone number, business type, and any message you provide.
• Communication records: emails, call notes, and messages exchanged when you enquire about or receive our services.
• Technical data: IP address, browser type, device information, and pages visited, collected automatically via analytics and security tools.
• Client project data: information you provide when we deliver a service (e.g. website content, POS transaction data, or business documents relevant to a project).

We do not knowingly collect payment card details, government ID numbers, or other special personal information through this Site.

3. How We Use Your Information

We use the information we collect to:

• Respond to consultation requests and provide quotes or proposals;
• Deliver, maintain, and support the services you've engaged us for;
• Send you IT insights, updates, or marketing communications you've opted into (you can unsubscribe at any time);
• Understand how visitors use our Site, so we can improve performance and content;
• Comply with our legal, tax, and regulatory obligations; and
• Detect, prevent, and address fraud, security, or technical issues.

4. Our Legal Basis for Processing

Under POPIA, we process your personal information because it is necessary to:

• Take steps to enter into, or perform, a contract with you (e.g. a client engagement);
• Pursue our legitimate business interests in a way that doesn't override your rights (e.g. site analytics, direct marketing to existing clients); or
• Comply with a legal obligation we're subject to.

Where we rely on your consent, such as newsletter marketing, you may withdraw that consent at any time.

5. Cookies and Tracking

Our Site uses cookies and similar technologies for analytics, security, and functionality purposes. For full details on what cookies we use and how to manage them, please see our Cookie Policy.

6. Third-Party Service Providers

We share limited data with trusted service providers who help us run our Site and business, including:

• Google Analytics (Google LLC): website usage analytics;
• Google Firebase (Google LLC): hosting, database, and authentication infrastructure;
• Cloudflare: content delivery, security, and performance monitoring;
• Web3Forms: processes and delivers consultation form submissions to our inbox.

These providers process data on our behalf under their own privacy and security terms, and are contractually or operationally restricted from using your information for purposes other than providing their service to us.

7. Data Sharing and Disclosure

We do not sell your personal information. We only disclose it to third parties where necessary to deliver our services (see Section 6), where required by law, or where you have given us explicit consent to do so.

8. Data Security

We implement reasonable technical and organisational safeguards to protect your information against loss, unauthorised access, alteration, or disclosure, including access controls, encrypted connections (HTTPS), and restricted administrator access to our systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law (e.g. tax and financial recordkeeping obligations under South African law). Consultation enquiries that don't result in a client engagement are retained for a reasonable period and then deleted or anonymised.

10. Your Rights Under POPIA

As a data subject, you have the right to:

• Be notified that your personal information is being collected;
• Access the personal information we hold about you;
• Request correction or deletion of inaccurate, irrelevant, or unlawfully processed information;
• Object to the processing of your information for direct marketing purposes;
• Withdraw consent where processing is based on consent; and
• Lodge a complaint with the Information Regulator of South Africa if you believe your information has been mishandled.

To exercise any of these rights, contact us using the details in Section 13. The Information Regulator can be reached at inforegulator.org.za.

11. Children's Privacy

Our Site and services are intended for business owners and decision-makers. We do not knowingly collect personal information from children, and our services are not directed at anyone under the age of 18.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page shows when it was last revised. We encourage you to review this page periodically.

13. Contact Us

If you have questions about this Privacy Policy, or wish to exercise your rights under POPIA, contact our Information Officer:

• Email: [email protected]
• Phone: 063 906 0541
• Address: Albatross Street, Lenasia, Gauteng, 1821, South Africa