Legal
Privacy policy
This policy explains what personal information Appetite Technology (Pty) Ltd collects through appetitetech.com, why we collect it, who else sees it, and what you can ask us to do with it. It is written to meet the Protection of Personal Information Act 4 of 2013 (POPIA).
Responsible party
Appetite Technology (Pty) Ltd
CIPC registration number 2023/849612/07 (re-registered 2023; trading since 2012)
Information Regulator reference 2026-066601
350 Parkstation Road, Greenwood Park, Durban, 4051, South Africa
Information Officer: Wesley Sing
hello@appetitetech.com ·
+27 83 781 7000
1. What we collect
We only collect information you choose to give us. There are four ways that happens.
| Contact form | Your name, email address, the service you are interested in, and your message. |
|---|---|
| WhatsApp form | Your name and message, used to pre-fill a WhatsApp message that you send yourself. Once it reaches WhatsApp, Meta's own privacy terms apply to that conversation. |
| Naya, our AI assistant | What you type into the chat, and the chat transcript. If you book a call through Naya we also collect your name, email address, phone number, the service you want to discuss, and your preferred date and time. |
| Client onboarding questionnaire | For clients we have already signed: the business, brand, contact and project details you fill in, plus any logos, photographs and documents you upload. This form is only reachable on a private link we send you. |
We do not run advertising trackers, analytics tags or third-party cookie scripts on this site. The site stores a single preference in your browser — whether you chose light or dark mode — which never leaves your device and is not personal information.
Our hosting provider keeps standard server logs, which include IP addresses, for security and troubleshooting. We do not use those logs to build a profile of you.
2. Why we use it, and on what basis
- To reply to you. If you send an enquiry, book a call or chat to Naya, we use your details to answer, to quote, and to arrange the meeting. Our basis is that processing is necessary to take steps at your request before entering a contract.
- To deliver work we have been engaged for. Onboarding answers and uploads are used to build and run what you have hired us to build. Our basis is performance of that contract.
- To keep the site working and free of abuse. We screen form submissions for spam and rate-limit repeat submissions. Our basis is our legitimate interest in keeping the service usable.
- To meet legal and accounting obligations where the law requires us to keep records.
We do not sell personal information, we do not share it with advertisers, and we do not use it for automated decisions that have a legal effect on you.
3. Who else sees it
We use a small number of service providers (operators, in POPIA's language) to run the site. Each one only receives what it needs to do its job, and each is bound to process it on our instructions.
| Supabase | Database, file storage and backend functions. Holds enquiries, booking details, Naya chat logs and onboarding uploads. |
|---|---|
| Vercel | Website hosting and delivery. Keeps server access logs. |
| Anthropic | The language model behind Naya. Receives the messages you send in the chat. |
| Calendar scheduling. Receives the name, email address and time of a booked call. | |
| Zoom | Video meetings. Receives the meeting details and your email address so we can invite you. |
We will also disclose information if a law, a court or a regulator requires it of us.
4. Information that leaves South Africa
The providers above operate outside South Africa, so your information is processed in other countries, including in the United States and the European Union. Section 72 of POPIA allows this where the recipient is bound by rules that give comparable protection, or where the transfer is necessary to perform a contract with you or at your request. We rely on our written agreements with each provider and on the terms they publish.
5. How long we keep it
- Enquiries that do not become projects: up to 24 months, then deleted.
- Naya chat transcripts: up to 12 months, kept so we can improve the assistant and answer disputes.
- Client records, onboarding answers and uploads: for the life of the engagement and for as long afterwards as tax and company law requires us to keep records, which is generally five years.
- Server logs: for the period our hosting provider retains them, which is short.
We delete or anonymise information once we no longer have a reason to hold it.
6. How we protect it
The site is served over HTTPS. Form submissions are written through server-side functions rather than direct database access, the database enforces row-level security, and uploaded files sit in a private bucket. Access to client data is limited to the people working on that engagement. No system is perfect; if a breach affects your information, we will notify you and the Information Regulator as POPIA requires.
7. Your rights
Under POPIA you may ask us, free of charge, to:
- confirm what personal information we hold about you, and give you a copy of it;
- correct or complete anything that is wrong or out of date;
- delete information we no longer have grounds to keep;
- stop processing for a particular purpose, or object to it; and
- stop sending you direct marketing, which we will act on immediately.
Email hello@appetitetech.com and we will respond within 30 days. We may need to confirm who you are first. If you are in the United Kingdom or the European Economic Area, the equivalent rights under the UK GDPR and the GDPR apply to you and the same address reaches us.
8. Complaints
Please raise anything with us first. If you are not satisfied, you can complain to the Information Regulator of South Africa:
Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
complaints.IR@justice.gov.za
inforegulator.org.za
9. Children
This site is aimed at businesses. We do not knowingly collect information from anyone under 18. If you believe a child has sent us personal information, contact us and we will delete it.
10. Changes to this policy
If we change how we handle personal information we will update this page and move the date at the top. Material changes that affect you will be communicated directly where we have your contact details.