Privacy Policy

1. Who We Are

Bopaki Group (Pty) Ltd ("Bopaki Group", "we", "us") is a South African technology company registered under the laws of the Republic of South Africa (Reg. No. 2020/885992/07). We build the Municipal Compliance Management Platform (MCMP) — sovereign digital infrastructure for South African municipal compliance and licensing. This Policy applies to information collected through bopakigroup.com and any related services we operate.

---

2. Personal Information We Collect

When you interact with our website, we may collect the following:

• First name, last name, email, phone number
• Organisation or municipality name and the nature of your enquiry
• Demo booking details (date, time, meeting link)
• Website usage data — collected only with explicit POPIA consent via our cookie notice
• Browser type, device information, and IP address (anonymised where possible)

---

3. Why We Collect Your Information

We process personal information to respond to enquiries, schedule platform demonstrations, manage client and prospect relationships, improve our website and services, and comply with our legal obligations under South African law. We will not use your information for any other purpose without your prior consent.

---

4. Legal Basis for Processing

Under POPIA, we process personal information on the following lawful grounds:

• Consent — where you have given explicit consent (e.g. a form submission or accepting cookies)
• Legitimate interests — to operate our business and respond to enquiries
• Legal obligation — where processing is required under South African law

---

5. How We Store and Protect Your Information

Personal information is stored securely within Google Workspace infrastructure (Google Forms, Sheets, Gmail), which complies with ISO 27001 and SOC 2. Access is restricted to authorised personnel, no payment information is collected, and the website is served over HTTPS.

---

6. Third-Party Service Providers

We use the following third parties, each bound by their own privacy policies:

• Google LLC — Forms, Sheets, Gmail, Calendar, Analytics (consent-gated)
• Google Firebase — website hosting
• WhatsApp (Meta Platforms) — optional contact channel

---

7. Cookies and Analytics

Our website uses Google Analytics (GA4) with your explicit POPIA consent via the cookie notice shown on your first visit. You may accept or decline at any time. Declining means no usage data is collected.

---

8. How Long We Retain Your Information

Contact enquiries are retained up to 3 years from last contact; demo booking records up to 1 year; analytics data (where consented) per Google Analytics' default retention (up to 14 months). Information no longer required is securely deleted.

---

9. Your Rights Under POPIA

As a data subject, you have the right to access, correct, or request deletion of your personal information, to object to processing, and to withdraw consent at any time. Contact info@bopakigroup.com to exercise these rights — we respond within 30 days.

---

10. Complaints and the Information Regulator

If you are not satisfied with how we've handled your information, you may lodge a complaint with the Information Regulator of South Africa (details below).

---

11. Data Sovereignty

MCMP and all associated client data are hosted exclusively within South Africa, using Google Cloud infrastructure in the africa-south1 region (Johannesburg). We do not permit client or platform data to be transferred, stored, or processed outside South Africa.

---

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. Continued use of our website following an update constitutes acceptance of the revised policy.

---