How we handle
your information.

For the purposes of this Privacy Policy:

Personal Information means information relating to an identifiable living natural person or existing juristic person, as defined under POPIA.

Processing means collecting, recording, organising, storing, updating, retrieving, using, sharing, deleting or destroying personal information.

Data Subject refers to the individual whose personal information is processed.

Website means www.blocka1.com.

Services refers to all consulting, software, automation, CRM, web development and related services provided by Block A1.

Block A1 follows several core principles when processing personal information.

We aim to:

• collect only information that is reasonably necessary
• process information lawfully and fairly
• explain why information is collected
• keep information accurate where reasonably possible
• protect information using appropriate security measures
• retain information only for appropriate periods
• respect the rights of individuals under POPIA

Privacy is considered throughout the delivery of our services and when selecting the software and systems we use.

Depending on your interaction with us, we may collect different categories of personal information.

Contact Information

This may include:

• full name
• company name
• job title
• email address
• telephone number
• billing information
• communication preferences

Business Information

Where relevant to our consulting services we may collect:

• company information
• industry
• business size
• sales processes
• operational information
• workflow documentation
• CRM information
• project requirements
• business objectives

Project Information

During consulting engagements we may receive:

• documents
• spreadsheets
• reports
• process maps
• website content
• technical specifications
• software requirements
• branding assets
• customer journey information

Such information is only used for the purpose of delivering agreed services.

When you visit our Website, certain technical information may be collected automatically.

This may include:

• IP address
• browser type
• operating system
• referring website
• pages visited
• time spent on pages
• date and time of access
• approximate geographic location
• device identifiers

This information helps us understand how visitors use our Website and allows us to improve performance and user experience.

Block A1 uses Google Analytics to better understand visitor behaviour and improve the performance of our Website.

Google Analytics may collect information including:

• pages viewed
• session duration
• traffic sources
• browser information
• device type
• approximate location
• interactions with website content

Google Analytics uses cookies and similar technologies to generate statistical reports.

We do not use Google Analytics to intentionally identify individual visitors.

You can learn more about Google's privacy practices by visiting Google's Privacy Policy and can opt out through Google's browser add-on where available.

Our Website uses cookies and similar technologies to provide functionality, improve user experience and understand website performance.

Cookies are small text files stored on your device when visiting a website.

Cookies may be used to:

• remember preferences
• maintain website functionality
• improve security
• analyse website usage
• measure performance
• improve future services

Further information is available in our Cookie Policy.

We process personal information only where there is a legitimate business or legal reason to do so.

These purposes include:

• responding to enquiries
• preparing quotations
• delivering consulting services
• developing software solutions
• implementing CRM systems
• providing technical support
• improving our Website
• communicating project updates
• managing invoices
• complying with legal obligations
• maintaining security

We do not collect personal information for purposes unrelated to our business without your consent.

Where applicable under POPIA, Block A1 processes personal information based upon one or more of the following lawful grounds:

• your consent
• performance of a contract
• compliance with legal obligations
• protection of legitimate interests
• our legitimate business interests where these do not override your rights

Where consent is required, it may be withdrawn at any time, subject to legal or contractual limitations.

Where you have requested information from us or engaged our services, we may occasionally communicate with you regarding:

• service updates
• new offerings
• industry insights
• newsletters
• relevant articles
• invitations to webinars or events

You may unsubscribe from non-essential marketing communications at any time using the unsubscribe option contained within our emails or by contacting us directly.

We do not sell mailing lists or disclose your contact information to unrelated third parties for their independent marketing purposes.

Block A1 values the confidentiality of the information entrusted to us. We do not sell, rent or trade personal information to third parties for their independent marketing purposes.

We may share personal information only where it is reasonably necessary to operate our business, deliver our services or comply with legal obligations.

Examples include:

• trusted cloud hosting providers
• website analytics providers
• customer relationship management (CRM) platforms
• payment processors
• email and communication service providers
• information technology support providers
• professional advisers, including legal and accounting professionals
• government authorities where disclosure is required by law

Where third-party service providers process personal information on our behalf, we take reasonable steps to ensure that appropriate contractual and security measures are in place to protect that information.

Third-party providers are only authorised to process personal information for the purposes of providing services to Block A1 and are not permitted to use the information for their own unrelated purposes.

Certain service providers used by Block A1 may process or store information on servers located outside South Africa.

Examples may include cloud infrastructure providers, customer relationship management platforms, website hosting providers, email services and analytics providers.

Where personal information is transferred outside South Africa, Block A1 takes reasonable steps to ensure that:

• the recipient provides an appropriate level of protection
• contractual safeguards are implemented where appropriate
• the transfer complies with applicable provisions of POPIA

By using our Website or engaging our services, you acknowledge that certain information may be processed in countries other than South Africa where necessary to deliver our services.

Block A1 retains personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected.

Unless a longer retention period is required by law, contractual obligation or legitimate business necessity, customer information is generally retained for:

• the duration of the contractual relationship or service engagement; and
• a reasonable period thereafter to manage legal, accounting, taxation, audit or contractual obligations, resolve disputes and maintain appropriate business records

When information is no longer required, we take reasonable steps to securely delete, anonymise or destroy it in accordance with applicable legal requirements and our internal data management practices.

Protecting personal information is an important part of our business operations.

Block A1 implements reasonable technical and organisational measures designed to safeguard personal information against accidental loss, unauthorised access, misuse, disclosure, alteration or destruction.

These measures may include:

• secure password management
• access controls based on business need
• encrypted communications where appropriate
• reputable cloud hosting providers
• software updates and security patches
• secure backup procedures
• monitoring of systems for potential security risks

While we take reasonable precautions, no electronic transmission or storage system can be guaranteed to be completely secure. Accordingly, Block A1 cannot guarantee absolute security, although we continually strive to maintain appropriate safeguards.

Subject to applicable law, you may have the right to:

• request confirmation of whether we process your personal information
• request access to your personal information
• request correction of inaccurate or incomplete information
• request deletion of personal information where legally permissible
• object to certain processing activities
• withdraw consent where processing is based on consent
• lodge a complaint with the Information Regulator of South Africa

Requests relating to personal information may be submitted to Grow@BlockA1.com.

Before responding to certain requests, we may need to verify your identity to protect the privacy and security of personal information.

Block A1's Website and professional services are intended for businesses and adults.

We do not knowingly collect personal information from children under the age of 18.

If we become aware that personal information relating to a child has been collected without appropriate legal authority or consent, we will take reasonable steps to delete that information as soon as practicable.

Parents or legal guardians who believe that a child has provided personal information to Block A1 are encouraged to contact us so that appropriate action may be taken.

Although Block A1 maintains appropriate security safeguards, security incidents may occur despite reasonable precautions.

Where a data breach involving personal information is identified, we will investigate the incident promptly and take appropriate remedial action.

Where required by applicable law, affected individuals and the relevant regulatory authorities will be notified in accordance with the requirements of POPIA.

Our response may include:

• securing affected systems
• assessing the scope of the incident
• mitigating potential harm
• notifying relevant parties where legally required
• reviewing internal procedures to reduce the likelihood of future incidents

Our Website may contain links to websites, services or platforms operated by third parties.

Block A1 is not responsible for the privacy practices, content or security of third-party websites.

Users are encouraged to review the privacy policies of any external websites they visit before providing personal information.

The inclusion of a link does not constitute an endorsement of the third-party website or its services.

Block A1 may update this Privacy Policy from time to time to reflect changes in legislation, technology, business practices or the services we provide.

Updated versions will be published on www.blocka1.com together with the revised effective date.

Where material changes are made, we may provide additional notice where appropriate.

Continued use of our Website or services following publication of an updated Privacy Policy constitutes acknowledgement of the revised Policy.

If you have any questions regarding this Privacy Policy or how Block A1 processes personal information, you may contact us using the details below.

Block A1 (Pty) Ltd

Registration Number: 2021/146437/07

Website: www.blocka1.com

Email: Grow@BlockA1.com

If you believe that your personal information has been processed in a manner that does not comply with POPIA, we encourage you to contact us first so that we may investigate and attempt to resolve your concerns promptly. You also have the right to lodge a complaint with the Information Regulator of South Africa in accordance with applicable legislation.