POPIA privacy notice

01Who is responsible

02What we collect

Only what you choose to send us. The enquiry form sends:

• your name and company
• your email address, and your phone number if you give it
• the topic you chose and your message
• the page you sent the enquiry from
• whether you ticked the consent box for follow-up
• a hidden anti-spam field that people never see or fill in; automated programs that fill it are discarded and nothing they send is stored

If you contact us by email, phone or WhatsApp instead, we keep what you send us there in the same way.

If an engagement later needs documents, we agree a secure route with you in writing.

03What we do not collect

• The scorecard estimate and the Can you bid? check run in your browser. Nothing you enter is sent or stored.
• We use no advertising or tracking cookies, and we do not sell or share your details for marketing.
• We do not ask for ID numbers, and no documents can be uploaded through the website.

04Why we use it, and on what basis

We use your details to reply to your enquiry and, if you tick the consent box, to follow up about the services you asked about. The lawful basis is your consent and, where you ask us for a quote, steps taken at your request before a contract (POPIA section 11).

We send direct marketing only with your consent, as section 69 of POPIA requires, and every message lets you opt out.

05Where it is kept

Enquiries sent through the form are stored on KRAGOS's own server in South Africa and read there by KRAGOS Compliance so we can reply. No email copy of a form enquiry is sent automatically. Emails you send to ops@kragos.app stay in that mailbox. Our software products keep their own data under their own privacy notices.

06How long we keep it

We keep an enquiry for 12 months from our last contact with you, and then delete it. If you become a client, your records are kept for as long as the client agreement and the law require.

07Security

We limit access to the people handling your enquiry, use encrypted connections, and keep enquiry records off public systems. If we learn of a compromise that affects you, we will tell you and the Information Regulator as section 22 of POPIA requires.

08Your rights

You may ask us to:

• confirm whether we hold personal information about you, and give you a copy
• correct or delete information that is wrong, out of date or no longer needed
• stop processing it, or withdraw your consent
• stop sending you direct marketing

Send requests to ops@kragos.app. We may ask you to confirm who you are before we act. Requests for records can also be made under our PAIA manual.

09Complaints to the Information Regulator

If you are not satisfied with how we handled your information, you may complain to the Information Regulator.

10Changes to this notice

We will update this notice when our practice changes and show the date at the top.