Privacy Policy

Last updated: November 18, 2025

Introduction

FlexFusion (Pty) Ltd (“FlexFusion,” “we,” “us,” or “our”) is a digital solutions company offering consulting services in marketing, design, software development, IT, AI, IoT, and robotics. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our services. It is written to comply with the Protection of Personal Information Act, 2013 (POPIA) of South Africa and other applicable data protection laws. By accessing our website or using our services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our site and services.

Personal Information We Collect

We collect different types of personal information from you, depending on how you interact with us. This includes:

• Information You Provide Directly: When you contact us, fill out a form (such as our contact or inquiry forms), or communicate with us in any way, you may provide personal details. This can include your name and surname, email address, telephone or mobile number, and any other information you choose to provide (for example, the content of your message or inquiry). We will also collect any information contained in correspondence you send us (such as emails or WhatsApp chats).

• Information Collected Automatically: When you visit our website, we automatically collect certain technical and usage data through cookies and analytics tools. This usage data may include your Internet Protocol (IP) address, browser type and version, device identifiers, operating system, the pages you visit on our site, the time and date of your visit, time spent on those pages, and other diagnostic data. This information helps us understand how visitors use our site and enables us to improve the user experience.

• Cookies and Tracking Technologies: We use cookies and similar tracking technologies (such as web beacons or pixels) to remember your preferences and collect analytics information. Cookies are small text files placed on your device that help our website function and gather information about usage. For example, we use cookies to recognize you on return visits and to obtain data on site traffic and interactions. You have control over cookies – you can adjust your browser settings to refuse or delete cookies. (Please note that if you disable cookies, some features of our site may not function properly.) Where required by law, we will obtain your consent before using non-essential cookies on our site.

How We Use Your Personal Information

We use the personal information we collect for the following purposes:

• To Provide and Improve Our Services: We process your information to deliver the services or information you request. For example, if you contact us for a consultation or quote, we will use your contact details to respond. We may also use your feedback or usage data to improve our website, products, and services. This includes analyzing how users interact with our site so we can enhance functionality and user experience.

• To Communicate with You: We may use your contact information (such as email or phone number) to communicate with you about your inquiries, to deliver customer support, and to send important updates or administrative messages. If you have opted in to receive marketing communications (such as a newsletter or promotional updates), we will use your email address to send you those, typically via our email marketing platform. You can opt out of marketing emails at any time (see Your Rights and Choices below).

• For Marketing and Promotional Purposes: With your consent (when required), we may use your information to send you newsletters, industry updates, event invitations, or other marketing materials that we believe may be of interest to you. We will do this only if you have subscribed or otherwise indicated that you wish to receive such communications. Every marketing email will include an easy way for you to unsubscribe or opt out of future messages.

• Analytics and Personalization: We use data (especially usage data collected via cookies and Google Analytics) to understand website traffic and user behavior. This helps us compile aggregate statistics about how our site is used (e.g., which pages are most visited, what sources lead visitors to our site) and to personalize your experience. For instance, we might use analytics insights to optimize site content or navigation for better usability.

• To Ensure Security and Prevent Misuse: We may process personal data as necessary to maintain the security of our website and services, to prevent fraud, unauthorized access, or other misuse. This includes using certain data to detect, investigate, and mitigate fraudulent or illegal activities that could affect our business or users.

• Legal Compliance: We process personal information to comply with applicable laws and regulations. For example, we may retain certain transaction records for tax or accounting purposes, or disclose information when required by a lawful request from authorities. We also may use and disclose data as necessary to assert our legal rights, protect our assets, or respond to legal claims (such as enforcing our contracts or this policy).

We will only use your personal information for the purposes stated above or for closely related purposes. If we need to use your information for any other purpose, we will update this Privacy Policy or obtain your consent as required by law.

Cookies and Analytics

As noted, our website uses cookies and third-party analytics services to collect usage data:

• Cookies: Cookies help us remember your preferences and track your use of our site. Some cookies are essential for our site’s functionality (for example, to enable navigation or remember your form inputs), while others are analytical or performance cookies that help us improve the website. We do not use cookies to collect sensitive personal information or to perform advertising tracking at this time (we do not serve third-party ads on our site). You have choices regarding cookies: you can refuse non-essential cookies via any consent banner (if shown) or by adjusting your browser settings to block them. You can also delete cookies after visiting our site. For more information about cookies and how to manage them, see your browser’s help documentation. Keep in mind that disabling all cookies might affect the functionality of our site.

• Google Analytics: We use Google Analytics, a web analytics service provided by Google LLC, to understand how visitors engage with our website. Google Analytics uses first-party cookies to collect information such as your IP address (which may be anonymized by Google), browser type, operating system, referring URLs, pages viewed, and the time spent on our site. Google may process this information on servers in various countries (including the United States). The analytics data provided to us by Google is aggregate and does not identify you personally; it helps us analyze trends and improve our website’s performance and content. Google uses the collected data to track and examine the use of our website and to provide this reporting to us. Important: Google Analytics is used under Google’s Terms of Service and Privacy Policy. For more details on how Google collects and processes data, you can review Google’s Privacy Policy. If you wish to opt out of Google Analytics tracking, Google provides an Opt-Out Browser Add-on that you can install in your web browser, or you can disable cookies as mentioned above.

By using our site, you consent to the use of cookies and analytics as described, where such consent is required by law. We will provide notice or obtain consent for cookies in jurisdictions that mandate it (for instance, the EU). We respect “Do Not Track” signals to the extent required by applicable laws.

Third-Party Services and Data Processors

In running our website and providing our services, we rely on certain trusted third-party service providers to perform functions on our behalf. These third parties process personal information only as necessary for the relevant purposes, and each is bound by contractual obligations to keep your information confidential and secure. The third-party services we use include:

• Framer (Framer B.V.): Our website is built using the Framer platform, which provides site design and hosting capabilities. When you submit information through forms on our website (e.g., a contact or inquiry form), the data is transmitted through Framer’s systems to reach us. Framer may temporarily process or store form submission data as part of delivering it to us. Framer is committed to GDPR compliance and protecting user data. We use Framer’s services to ensure our website is user-friendly and responsive, but we remain responsible for the data collected via our site.

• Supabase (Supabase Inc.): We use Supabase as our backend database and hosting solution for storing form submissions and other data related to our website and services. When you fill out a form or provide personal information on our site, that data may be stored in our secure Supabase database. Supabase is a cloud platform that may store data on servers outside of South Africa (for example, in the United States or other regions). However, Supabase implements security measures to protect stored data. We use Supabase to ensure your data is reliably stored and managed as we develop custom solutions.

• Brevo (formerly Sendinblue SAS): Brevo is an email marketing and communication platform we use to manage our mailing lists and send out email campaigns or newsletters. If you subscribe to our newsletter or opt to receive marketing emails, your name and email address will be stored in Brevo’s system. Brevo acts as a data processor for us, meaning they handle your contact data solely to send emails on our behalf. Every email sent via Brevo will include an option to unsubscribe. Brevo is a reputable platform that complies with data protection laws (including GDPR), and your information is protected while in their system.

• Google Analytics (Google LLC): As described above, Google Analytics collects usage data from our website through cookies. Google acts as our data analytics provider. The information (usage data) gathered by Google Analytics about your use of our site is generally transmitted to Google’s servers (which may be in the United States or other countries) and analyzed there. Google Analytics provides us with reports and insights but does not identify individuals to us. Google is a participant in frameworks like the EU-US Data Privacy Framework and employs safeguards for international data transfers. You can opt out of Google Analytics as noted in the Cookies and Analytics section.

We may also use additional third-party tools or plugins on our site (for example, a social media sharing widget or a captcha service for security). If any such tool collects personal data, we will provide notice or obtain consent as required.

Important: Third-party service providers have their own privacy policies that govern their use of your information. We recommend reviewing the privacy policies of these providers (e.g., Google’s Privacy Policy for Google Analytics, Brevo’s Privacy Policy, etc.) to understand how they handle your data. However, they are authorized to use your personal information only as necessary to provide services to FlexFusion and not for other purposes.

We do not sell your personal information to any third parties. We also do not share personal data with third parties for their own marketing or advertising purposes without your explicit consent.

Sharing and Disclosure of Information

Aside from our use of third-party processors mentioned above, we only share your personal information in a few limited circumstances:

• Within FlexFusion: If necessary, your information may be shared internally among our team members who need it to perform their duties (for example, a business development member responding to your inquiry). All such sharing is on a need-to-know basis and under obligations of confidentiality.

• Business Partners or Sub-contractors: In providing our consulting services, we may sometimes partner with subcontractors or consultants (for instance, a specialist developer or designer) who assist in delivering a project. If it is necessary to share personal information (for example, your contact information or project requirements) with such partners, we will do so only with appropriate confidentiality agreements in place and only to further the purpose for which you provided the information.

• Legal Requirements: We may disclose your personal information if required to do so by law or lawful request. This includes complying with legal obligations, responding to subpoenas or court orders, or cooperating with regulatory authorities (such as the South African Information Regulator or other data protection authorities). We may also disclose data if we believe in good faith that such action is necessary to protect and defend our rights or property, to prevent fraud, or to protect the safety of our clients or the public.

• Business Transfers: If FlexFusion undergoes a business transaction such as a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the successor or new owner as part of that transaction. If such a transfer occurs, we will ensure that the new entity is bound to respect your personal information in a manner consistent with this Privacy Policy (or we will notify you and obtain consent if required by law).

Other than the cases above, we will not share your personal data with any third parties unless we have your consent to do so.

International Data Transfers

FlexFusion is based in Sandton, South Africa, but we may process and store your information in cloud services and with service providers located in other countries. In particular, some of our third-party processors (Google, Supabase, Brevo, etc.) may host or process data on servers in the United States, European Union, or other jurisdictions outside of South Africa. This means your personal information could be transferred to and stored in a country that has different data protection laws than South Africa.

When we transfer personal data out of South Africa or your country of residence, we take steps to ensure that appropriate safeguards are in place to protect your information. These safeguards may include:

• Relying on countries officially recognized as having adequate data protection laws.

• Implementing standard data protection clauses (also known as Standard Contractual Clauses) in agreements with our service providers to contractually require that your data receives a level of protection equivalent to that in South Africa or the EU.

• Ensuring our third-party processors certify to relevant data protection frameworks (for example, if transferring EU personal data to the U.S., ensuring the processor complies with the EU-U.S. Data Privacy Framework or similar mechanisms).

By using our website or providing us with your information, you consent to the transfer of your personal information across international borders as described here. We will always handle your personal data securely, but if you have questions about international data transfers, please contact us.

Data Security and Retention

Security: We take the security of your personal information seriously. FlexFusion implements appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure. These measures include, for example, encryption of data where suitable, secure servers and firewalls, regular software updates and security patching, and restricted access to personal data by our staff on a need-to-know basis. We also ensure that our third-party service providers employ robust security practices. However, please be aware that no method of transmitting data over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. You share and transmit information at your own risk, but we will promptly notify you and the relevant authorities of any data breach that poses a significant risk to your rights, as required by law.

Retention: We will retain your personal information only for as long as necessary to fulfill the purposes we collected it for, unless a longer retention period is required or permitted by law. For example, if you contact us with an inquiry, we will keep your information to follow up and thereafter as needed to have an ongoing business relationship or as needed for our records. If you subscribe to our newsletter, we will retain your contact information until you unsubscribe or ask us to delete it. We may also retain certain data for a longer period if it is subject to legal retention obligations (e.g., financial records that must be kept for tax purposes) or to resolve disputes or enforce our agreements. When personal information is no longer needed, we will securely delete or de-identify it. If deletion is not feasible (for example, because the data is stored in backups), we will ensure it remains securely stored and isolated from further use until deletion is possible.

Your Rights and Choices

You have certain rights regarding your personal information, and we want to ensure you can exercise those rights. Subject to applicable law (such as POPIA in South Africa and, if applicable, the GDPR in the European Union), your rights may include:

• Access Your Information: You have the right to request access to the personal information we hold about you. We will provide you with a copy of your information in a commonly used format, as well as details on how we use it, upon request (subject to any exemptions under law).

• Correct or Update Information: If any of your personal details we have are incorrect or outdated, you have the right to request correction or updating of that information. You can contact us to correct any inaccuracies in your personal data.

• Deletion (Right to Erasure): You have the right to request deletion of your personal information (the “right to be forgotten”). Upon your request, we will delete or anonymize the personal data we hold about you, provided we do not have a legitimate reason or legal obligation to retain it. For example, if you withdraw your consent for marketing emails, we will remove your email from our mailing list. (Note: we may need to retain certain minimal information to record that you opted out, so we don’t contact you again inadvertently.)

• Object to Processing: You have the right to object to or restrict certain processing of your data. For instance, you can object to processing done on the basis of our legitimate interests (where your particular situation justifies it), or object to automated decision-making if we engaged in that (we typically do not use automated decision-making or profiling on our site). You can also opt out of analytics tracking by using the tools provided (see Cookies and Analytics section).

• Withdraw Consent: Where we rely on your consent to process your personal information (for example, for sending marketing communications or certain cookies), you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, and it will not affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

• Data Portability: If applicable, you have the right to data portability, meaning you can request that we provide your personal information (that you provided to us) in a structured, commonly used and machine-readable format, and/or transmit it to another data controller where technically feasible. (This right applies under GDPR for information processed by automated means on the basis of consent or contract.)

• Opt Out of Communications: Even if not formally a "right," we emphasize that you can opt out of marketing or newsletter emails at any time. Simply click the “unsubscribe” link in any email we send, or contact us at our email address below to request removal. You will then be removed from our mailing list. Note that even if you opt out of marketing messages, we may still send you essential administrative or transactional communications (e.g., response to an inquiry you sent, or updates related to a service you are using).

To exercise any of your rights, please contact us using the contact details provided in the Contact Us section below. We will need to verify your identity adequately before fulfilling certain requests (this is to protect your information from unauthorized access). We will respond to your request within a reasonable time and in accordance with applicable law. In South Africa, we may require you to fill out a Form (such as POPIA Form 2 or PAIA Form) for certain requests like access; we will guide you through the process if needed.

No Fee in Most Cases: You will not usually have to pay a fee to exercise your rights. However, if a request is manifestly unfounded or excessive (for example, repetitive requests), we may charge a reasonable fee or refuse to act on the request as permitted by law.

Complaints: We are committed to resolving any complaints about our handling of personal information. If you have concerns or believe your privacy rights have been violated, please contact us first so we can address the issue. If you are not satisfied with our response, and you are in South Africa, you have the right to lodge a complaint with the Information Regulator (South Africa), which is the government authority overseeing data protection. The Information Regulator’s contact email for POPIA complaints is POPIAComplaints@inforegulator.org.za and their general contact email is enquiries@inforegulator.org.za. If you are in another jurisdiction (such as the EU or UK), you may have the right to file a complaint with your local data protection authority as well. We encourage you to contact us with any questions or issues, and we will do our best to resolve them.

Children’s Privacy

Our website and services are not directed to children under the age of 18, and we do not knowingly collect personal information from anyone under 18 years of age without parental consent. If you are under 18, please do not provide any personal information to us without permission from your parent or guardian. In the event we learn that we have inadvertently collected personal data from a child under 18 without proper consent, we will take steps to delete that information promptly. If you believe that we might have any information from or about a minor, please contact us immediately so that we can address it.

(For parents or guardians: if you have given consent for your minor child to use our services, you may request access to or deletion of the child’s personal information at any time, as described in the “Your Rights” section above.)

External Links

Our website may contain links to other websites or services that are not operated by FlexFusion. For example, we may link to our social media pages or to content on other sites relevant to our industry. If you click on a third-party link, you will be directed to that third party’s site. This Privacy Policy applies only to FlexFusion’s own website and services, and we have no control over the content, privacy practices, or security of third-party websites. We strongly advise you to review the privacy policy of every external site you visit. We are not responsible for the privacy practices or policies of any third parties outside of our organization.

Changes to This Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will post the updated Privacy Policy on this page and update the “Last updated” date at the top. If the changes are significant, we may also provide a more prominent notice (such as a banner on our website or an email notification, if appropriate). We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after any changes to this Privacy Policy have been posted will signify your acceptance of those changes.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal information is handled, please contact us at:

FlexFusion (Pty) Ltd
Email: info@flexfusion.co.za
Phone: +27 68 914 9749
Address: 57 Sloane Street, The Campus, Twickenham Building, Bryanston, Sandton, 2021, South Africa

Attn: Privacy Officer (Information Officer) – FlexFusion

We will be happy to assist you and will respond as soon as reasonably possible. Your privacy is important to us, and we welcome any feedback or questions you may have about our data protection practices.

Thank you for trusting FlexFusion with your personal information. We are dedicated to keeping that trust by respecting your privacy and keeping your information secure.