Privacy Policy

1. Who we are

Veyra Group sells month-to-month subscriptions to an advertising and lead-management software platform. We also offer a done-with-you service where our team helps set up and launch advertising campaigns.

[Registered company name], registration number [Company registration number], trading as Veyra Group, is the "responsible party" for personal information processed through our website and platform, as that term is defined in POPIA.

2. Information we collect

We collect the following categories of personal information, depending on how you interact with us:

• Contact-form details: name, email address, phone number, business name, and the content of your message.
• Checkout and account details: name, email address, mobile number, business name, and plan selection.
• Payment status: whether a payment succeeded, failed, or was refunded, and the subscription plan and amount. We do not collect or store full card numbers; our payment processor PayFast handles that directly (see section 6).
• Campaign parameters: UTM parameters and click identifiers (such as fbclid) attached to the link you used to reach our site, so we know which advertising campaign or referral brought you to an enquiry.
• Cookie and pixel data: collected only after you accept non-essential cookies in our cookie banner (see section 7).
• Essential local storage: a record of the cookie choice you made, so we do not ask again on every visit.
• Communications: any emails, messages, or support requests you send us, and our replies.

3. How we use your information

We use personal information to:

• Respond to enquiries made through our contact form.
• Create and administer your subscription and account.
• Process payments through PayFast and manage billing.
• Provide the Scale and Dominate services described in our Terms & Conditions, including Done-With-You campaign setup where applicable.
• Provide customer support and respond to account or billing questions.
• Send service communications, such as billing notices or changes to these policies.
• Measure how our advertising is performing, where you have given cookie consent.
• Meet our legal, accounting and tax obligations.
• Protect the security of our platform and prevent fraud or abuse.

4. Our lawful basis for processing

POPIA requires us to have a lawful basis for each way we use personal information. We rely on the following bases:

• Performance of a contract: to set up and run your subscription, process payments, and provide the services you have purchased.
• Consent: for non-essential cookies, the Meta Pixel, and optional Google Analytics, and for any marketing communications you have opted into.
• Legitimate interests: to respond to enquiries, keep our platform secure, and understand which campaigns drive enquiries, balanced against your right to privacy.
• Legal obligation: to keep billing and tax records for the periods required by South African law.

5. Payment processing

Your monthly subscription fee is processed by PayFast, a third-party payment service provider. When you enter payment details at checkout, those details are submitted directly to PayFast's secure environment.

Veyra Group does not see or store your full card number, card expiry date, or card security code. We receive only the payment status (successful, failed, or refunded) and a transaction reference from PayFast.

PayFast processes your payment information under its own privacy policy and security standards, which you can review on the PayFast website before you pay.

6. Cookies and tracking technologies

Our website uses an essential cookie or local storage entry to remember the choice you make in our cookie banner. This is necessary for the site to work and does not require consent.

With your consent, given through the cookie banner, we also use:

• Meta Pixel, to measure the performance of our Facebook and Instagram advertising and build advertising audiences.
• Google Analytics (optional, used only where enabled), to understand how visitors use our website.

7. Withdrawing cookie consent

You can change your cookie choice at any time using the cookie settings link in our website footer. Declining or withdrawing consent stops the Meta Pixel and Google Analytics from loading on future page views, and reloads the page to remove any scripts already running.

Blocking cookies may affect how some parts of the website work, but it will never prevent you from submitting the contact form or subscribing to a plan.

8. Who we share information with

We do not sell personal information. We share personal information only with the operators and processors that help us run our business, and only to the extent needed for the purpose described:

• PayFast: to process your subscription payment.
• GoHighLevel: our customer relationship management (CRM) system, used to store enquiry and customer records and to manage follow-up communications. GoHighLevel is based in the United States.
• Our hosting provider [Hosting provider name and country, to be confirmed]: to host our website and store the data it collects.
• Meta Platforms, Inc.: to operate the Meta Pixel, where you have given cookie consent.
• Google LLC: to operate Google Analytics, where enabled and where you have given cookie consent.
• Professional advisers, such as our accountant or lawyer, where reasonably necessary.
• Any party where we are required to disclose information by law, court order, or a lawful request from a regulator.

9. Cross-border transfers

Because our CRM provider, GoHighLevel, is based in the United States, enquiry and customer records are transferred outside South Africa. This is a cross-border transfer under section 72 of POPIA.

We only use providers that commit, through their own terms of service or data processing terms, to protect personal information to a standard that is comparable to the protection POPIA requires in South Africa. We review this when we choose or change a processor.

If our hosting provider is based outside South Africa, the same approach applies; [Hosting provider name and country, to be confirmed].

10. How long we keep your information

We keep personal information only for as long as we reasonably need it for the purpose we collected it for, or as required by law. The periods below are our current proposal and are marked for confirmation:

• Contact-form enquiries that do not become a customer relationship: retained for [enquiry retention period to confirm, proposed 24 months after last contact], then deleted or anonymised.
• Customer, subscription and billing records: retained for [billing record retention period to confirm, proposed 5 years for tax and accounting law], in line with tax and accounting record-keeping requirements.
• Campaign parameters attached to an enquiry: retained for as long as the enquiry record they are attached to.
• Cookie consent choice: retained in your browser's local storage until you clear it or change your choice.

11. How we protect your information

We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, misuse, alteration, or disclosure, including restricting access to personal information to staff who need it to do their work, and relying on payment and hosting providers that maintain their own security standards.

No website or online service can guarantee complete security. If you believe your information has been compromised through our platform, please contact us using the details in section 16.

12. Your rights under POPIA

Subject to POPIA, you have the right to:

• Ask us to confirm whether we hold personal information about you, and to request a copy of it.
• Ask us to correct, update, or delete personal information that is inaccurate, out of date, incomplete, misleading, or obtained unlawfully.
• Object to our processing of your personal information on reasonable grounds, including processing for direct marketing.
• Withdraw consent for cookies, the Meta Pixel, Google Analytics, or marketing communications at any time, without affecting processing already carried out while consent applied.
• Lodge a complaint with us, or with the Information Regulator, if you believe your rights have been infringed (see section 14).

13. Direct marketing

We will only send you direct marketing communications, such as emails about new features or offers, where POPIA allows us to do so, for example because you are an existing customer and the communication relates to a similar product or service, or because you have given consent.

Every marketing communication includes a way to opt out. You can also object to direct marketing at any time by contacting us using the details in section 16.

14. Children

Our website and platform are intended for business use by adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

15. Complaints to the Information Regulator

If you are unhappy with how we have handled your personal information, we encourage you to contact us first so we can try to resolve it (see section 16).

You also have the right to lodge a complaint directly with South Africa's Information Regulator, which oversees POPIA:

• Website: https://inforegulator.org.za
• POPIA complaints: POPIAComplaints@inforegulator.org.za
• General enquiries: enquiries@inforegulator.org.za

16. Changes to this policy

We may update this Privacy Policy from time to time, for example to reflect changes to our services, our processors, or the law. We will post the updated version on this page with a new effective date. Please check back from time to time.

17. Contact us

For any question about this Privacy Policy, or to exercise any of the rights listed in section 11, please contact our Information Officer:

• Information Officer: [Information Officer name]
• Email: [Support email address]
• Postal and physical address: [Business address]
• Registered company: [Registered company name], registration number [Company registration number]