Privacy policy

Who we are

Experia Immersive Code (Pty) Ltd, registration number 2011/127851/67, trading as EngageONE, of Faerie Glen, Pretoria, 0081, South Africa.

Our Information Officer under section 55 of POPIA is Johan Esterhuyse, reachable at johan@engageone.plus. Any question, request or complaint about personal information should go to them first.

What we collect, and when

We collect only what a specific purpose requires. There is no collection "just in case".

• When you complete the enquiry form — your name, your business name and your WhatsApp number. You give these to us directly, and the form is the only place on this site that asks for them.
• When you message us on WhatsApp — your WhatsApp number, your profile name as WhatsApp presents it, and the content of what you send. Messages are carried by the WhatsApp Business Platform, which is operated by Meta.
• When you visit any page — aggregate traffic measurements collected by Cloudflare Web Analytics. This is measured without cookies and without building a profile of you, and we cannot identify an individual visitor from it.
• When a page loads — your browser requests fonts from Google Fonts, which means Google receives your IP address as part of serving that request. We do not receive it from them.
• When our own staff sign in to the administration area, we record the email address, name and profile picture supplied by their Google account, and a log of what they changed.
• When you complete an onboarding form we send you — your company’s legal and trading name, its registration and VAT numbers, its address, and the name, role, email address and telephone number of the people in your business who will deal with us. We ask only after we have spoken to you, and only to prepare your proposal and, if you go ahead, your agreement and invoices.
• Where those details describe somebody other than you — a colleague in accounts or operations — you are giving them to us on their behalf. Please tell them we hold them. We use them only to contact that person about your account.
• When you upload a document to that form — a registration certificate, a letterhead, or a photograph of one — we read the company details out of it and keep only those details. The file itself is not stored.

Why we may lawfully process it

POPIA requires a lawful basis for each purpose. Ours are these:

• Your consent, when you submit the enquiry form or start a WhatsApp conversation with us. You gave us the details in order to be contacted about the service, and that is the only thing we use them for.
• Performance of a contract, where we are already working with you and need your details to deliver what was agreed.
• Steps taken at your request before a contract, when you give us your company details so that we can prepare a proposal or an agreement.
• Our legitimate interests, for measuring aggregate site traffic and for keeping the administration area secure. Neither involves profiling you.

What we do not do

• We do not sell personal information, and we never have.
• We do not share it with third parties for their own marketing.
• We do not send marketing messages to people who have not asked to hear from us.
• We do not use advertising or tracking cookies on this site.
• We do not make decisions about you by automated means alone.

Who processes it on our behalf

We use operators — POPIA’s word for a processor — who act only on our instructions and are bound to keep the information confidential:

• Cloudflare, Inc. — hosting, storage and site analytics.
• Google LLC — sign-in for our own staff, and the fonts your browser loads.
• Meta Platforms, Inc. — carriage of WhatsApp messages, where you choose to message us.
• Anthropic PBC — the assistant that answers questions on this site, and that reads a document you upload to the onboarding form.

Where your information goes

These operators are outside South Africa and process information in other countries. Section 72 of POPIA permits this where the recipient is bound by rules affording protection substantially similar to POPIA, which is the basis we rely on, and it is reinforced by the contractual terms each of them is subject to.

How long we keep it

Enquiries that do not become work are kept for 12 months and then deleted. Records relating to work we actually did are kept for as long as the law requires us to keep business records, and no longer than that. Administration audit logs are kept for 12 months.

Onboarding details for an enquiry that does not become work are kept for 12 months, like any other enquiry. A document you upload is not kept at all — we read the company details out of it and discard the file.

You can ask us to delete your information sooner. Where nothing requires us to keep it, we will.

How we protect it

The site is served over HTTPS. Access to the administration area is restricted to named members of our team, requires a Google account we have specifically allowed, and every change is recorded against the person who made it. We hold no passwords for it.

No system is beyond compromise. If personal information is accessed without authorisation, section 22 of POPIA requires us to notify the Information Regulator and every affected person, and we will.

Your rights

Under POPIA you may, at any time and free of charge for the request itself:

• Ask what personal information we hold about you, and receive a copy of it.
• Ask us to correct anything inaccurate, or complete anything missing.
• Ask us to delete information we no longer have grounds to keep.
• Object to processing we carry out on the basis of legitimate interests.
• Withdraw a consent you gave us, which stops the processing that relied on it.
• Complain to us, and if we do not resolve it, to the Information Regulator.

Complaining to the Regulator

The Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg 2001 — complaints.IR@justice.gov.za. You may complain to them directly; you do not have to come to us first, though we would rather you did so we can fix it.

Children

This site sells to businesses and is not directed at children. We do not knowingly collect the personal information of anyone under 18. If we learn that we have, we delete it.

Changes to this policy

When this policy changes materially we will publish the new version here with a new effective date. The version in force is the one on this page.

Contact

Information Officer: johan@engageone.plus. General enquiries: support@engageone.plus, or WhatsApp 27798802574.