Last updated: August 2026

Who we are and who is responsible

Digitalx Group (Pty) Ltd, trading as Digitalx, is a South African business solutions company registered in the Republic of South Africa, operating from Kuils River, Cape Town, Western Cape. For the purposes of the Protection of Personal Information Act 4 of 2013 (POPIA), Digitalx is the responsible party for the personal information described in this policy.

You can reach our information officer by emailing hello@digitalxagency.io or calling 021 879 3035. If you have a concern about how your information is handled, contact us first. We would far rather fix it directly than have you escalate.

The information we collect

We only collect what we need to do the work you have asked us to do.

Information you give us directly

Your name, email address and phone number when you submit an enquiry, order or quote request
Business details such as company name, trading name, industry and website address
Identity information required by law for CIPC company registrations, including full names, identity or passport numbers and certified copies of identity documents
Director and shareholder details where a company registration requires them
Files you upload, such as logos, artwork, photographs and documents
Your email address if you subscribe to the Daily Grind newsletter

Information collected automatically

Basic analytics through Google Analytics and Google Tag Manager, including pages visited, approximate location, device type and referring source
Cookies that keep the site working and remember preferences such as dark mode

Payment information

Card payments are processed by Paystack on their own secure, PCI-DSS compliant checkout. Digitalx does not see, receive or store your card number, expiry date or CVV at any point. We receive only a payment reference, the amount, and the name and email address you supplied.

Why we process it, and on what basis

POPIA requires us to have a lawful reason for processing your information. Ours are:

To perform a contract with you. Delivering the services you ordered, including filing registrations, building websites and running campaigns.
To comply with the law. CIPC and SARS submissions require identity information. We cannot register a company without it.
With your consent. Marketing emails and the newsletter. You can withdraw consent at any time.
Our legitimate interests. Responding to enquiries, invoicing, keeping records, preventing fraud and improving our services.

Who we share it with

We do not sell your personal information to anyone, ever, and we do not trade mailing lists.

We share only what is necessary, and only with:

CIPC, where you have asked us to register a company, file annual returns or lodge a beneficial ownership declaration
SARS, where you have asked us to assist with tax registration
Paystack, our payment processor, for the purpose of taking payment
Hosting and email providers who operate the servers your website and mailboxes run on
Google and Meta, where you have engaged us to run advertising campaigns on those platforms
Supabase, which powers our client portal, where your project records are stored with row level security
Our own team, on a need to know basis

We may also disclose information where a court order, regulator or statute requires it.

Cross border transfers

Some of the providers above operate servers outside South Africa. Where personal information leaves the country, we only use providers who apply data protection standards comparable to POPIA, or who are bound by contract to do so. If you would prefer your website and email to be hosted in South Africa specifically, tell us and we will arrange it.

How long we keep it

Enquiries and quotes that do not proceed: up to 24 months, then deleted.
Client records, invoices and correspondence: a minimum of five years, as required by South African tax and company law.
Certified identity documents for registrations: retained as long as required for the filing and any statutory record keeping obligation, then securely destroyed.
Newsletter subscriptions: until you unsubscribe.
Analytics data: in line with Google's retention settings.

Your rights under POPIA

You have the right to:

Ask what personal information we hold about you, and receive a copy
Ask us to correct information that is wrong or incomplete
Ask us to delete information we no longer have a lawful reason to keep
Object to processing based on legitimate interests
Withdraw consent to marketing at any time, with no effect on services you are already receiving
Complain to the Information Regulator of South Africa

To exercise any of these, email hello@digitalxagency.io. We will respond within a reasonable period and will not charge you for a reasonable request. We may need to verify who you are before releasing information, which protects you as much as us.

How we protect your information

SSL/TLS encryption across this website and all client websites we manage
Row level security on client portal data, so one client cannot see another's records
Access limited to team members who need it for their work
Password protected hosting and email accounts, with regular backups
Card data never touching our systems, by design

No system is completely secure. If a breach occurs that creates a real risk to you, we will notify you and the Information Regulator as POPIA requires.

Marketing and the newsletter

We send the Daily Grind newsletter only to people who asked for it. Every edition carries an unsubscribe link, and unsubscribing takes effect immediately. We may also contact existing clients about their own services, which is service communication rather than marketing.

Cookies

This site uses a small number of cookies: essential ones that make the site function, a preference cookie that remembers whether you chose dark mode, and analytics cookies through Google Tag Manager. You can block or delete cookies in your browser settings, though some parts of the site may then behave oddly.

Children

Our services are aimed at businesses and we do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

Changes to this policy

We may update this policy as our services or the law change. The date at the top always reflects the current version. Material changes affecting how we use your information will be communicated to active clients directly.

Contact us

Questions? Email hello@digitalxagency.io or call 021 879 3035.

Legal

Privacy Policy