Privacy Policy

Source Code Development ("we", "us" or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have over it.

It applies to everyone who visits our website, completes our contact forms, or engages our services. We process personal information in line with the Protection of Personal Information Act, 2013 (POPIA) and all other applicable South African laws. By using our website or providing us with your information, you acknowledge that you have read and understood this policy.

The information we collect falls into two categories:

Information you give us

• When you enquire or book a consultation: your name, email address, phone number, project type and any message you send us.
• When we work together: company details, billing information and project-related material you share with us.
• When you contact us directly by email, phone or in person.

Information collected automatically

• Technical data such as your IP address, browser type and version, device type, pages visited and how long you spent on them.
• Information gathered through cookies and similar technologies (see section 9).

We collect information in the following ways:

• Directly from you — when you submit our contact form, email us, call us, or meet with us.
• Automatically — as you navigate our website, through cookies, log files and analytics tools.
• From authorised third parties — such as payment providers or service providers you have directed to share information with us, or publicly available sources where permitted by law.

We use your information for the following purposes:

• To respond to enquiries and schedule consultations.
• To provide, manage and deliver the software development and related services you request from us.
• To send you project updates, invoices and other service-related communications.
• To improve and personalise our website and services.
• To maintain security, prevent fraud and protect our and your rights.
• To comply with legal and regulatory obligations.
• With your consent, to send you marketing communications about our services. You can opt out at any time using the unsubscribe link in any such email or by contacting us.

We do not sell or rent your personal information to third parties, and we never will.

Under POPIA, we only process personal information where we have a lawful basis to do so:

• Consent — where you have agreed to a specific use, such as receiving marketing communications.
• Performance of a contract — where processing is necessary to deliver the services you have asked us to provide.
• Legal obligation — where we are required to process information to comply with the law, such as tax and accounting records.
• Legitimate interest — where our interests (or a third party's) justify the processing and your rights do not override them, such as securing our website and understanding how it is used.

We may share your personal information with:

• Service providers who help us operate — for example our hosting and database provider (Supabase), email delivery provider (Resend), analytics tools and payment processors. These providers are bound by confidentiality and data protection obligations and may only process your information to provide services to us.
• Professional advisers such as accountants or lawyers, where necessary.
• Business transfers — if we merge, sell or transfer all or part of our business, your information may be transferred as part of that transaction.
• Legal requirements — courts, regulators, law enforcement or other authorities where we are legally required to disclose information.

Where we share information with third parties, we take reasonable steps to ensure they protect it in accordance with this policy and applicable law.

We have implemented appropriate technical and organisational measures to protect your personal information against loss, theft, unauthorised access and misuse, including:

• Encrypted transmission of data (TLS/HTTPS) across our website.
• Access controls that limit who can view personal information.
• Secure, restricted storage of project and client records.
• Confidentiality obligations on our team members.

No method of transmission or storage is completely secure, and the security of your information also depends on you — for example, by keeping your login credentials private. Please notify us promptly if you suspect any unauthorised use of your information.

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, unless a longer period is required or permitted by law. For example:

• Enquiry details are kept while we respond to you and, if you become a client, for the duration of our relationship.
• Financial and tax records are retained for the period required by South African law (typically five years).
• Website analytics data is retained in aggregated form and is not used to identify you.

When information is no longer needed, we delete it securely or anonymise it so it can no longer be linked to you.

Our website may use cookies and similar technologies. A cookie is a small file stored on your device that helps us remember your preferences and understand how the site is used. We use:

• Strictly necessary cookies — required for the website to function.
• Analytics cookies — which help us understand how visitors use the site so we can improve it. Analytics data may include your IP address and browsing behaviour and is processed in aggregated form.

You can control cookies through your browser settings, and you may refuse or delete them at any time. Please note that disabling certain cookies may affect how the website functions for you.

Under POPIA, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct or update inaccurate or incomplete information.
• Deletion — request that we delete your personal information, subject to legal requirements.
• Objection — object to the processing of your information, including direct marketing.
• Complaint — lodge a complaint with the Information Regulator (South Africa) if you believe your information has not been handled lawfully.

To exercise any of these rights, email us at info@sourcecodes.co.za. We will respond within a reasonable period (typically within 30 days) and may need to verify your identity first. You may also lodge a complaint with the Information Regulator at inforegulator.org.za.

Some of the service providers we use (such as hosting, email and analytics providers) may store or process data on servers located outside South Africa. Where personal information is transferred across borders, we take reasonable steps to ensure it is protected by appropriate safeguards and in accordance with this policy and POPIA.

Our website and services are intended for businesses and adults, and we do not knowingly collect personal information from children under the age of 18. If you believe a child has provided us with personal information, please contact us so we can remove it.

Our website may contain links to third-party websites. This Privacy Policy applies only to our website, and we are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any website you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when it was last updated. Where changes are material, we will take reasonable steps to notify you, such as by posting a notice on our website. Continued use of our website or services after changes take effect constitutes acceptance of the updated policy.

If you have any questions, concerns or complaints about this Privacy Policy or how we handle your personal information, please contact us:

• Email: info@sourcecodes.co.za
• Phone: 072 541 3028
• Address: 11740 Sekwati Street, Zone 7A, Sebokeng, 1983, South Africa
• Company Registration No.: 2026/007155/07

You also have the right to lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za if you are not satisfied with how we have handled your information.