Privacy Policy

1. Who we are

Buddy Development Studio is a South African digital development studio providing website development, applications, custom business systems, hosting, domain-related services, maintenance, integrations and related technical services. In situations where Buddy determines why and how personal information is processed, Buddy acts as the responsible party for that processing.

2. Information we may collect

Depending on how you interact with us, we may collect information such as your name, business name, email address, telephone number, project requirements, budget or timeframe information, messages, quotation and invoice information, support correspondence, technical information required to deliver a service, and information submitted through project configurators or enquiry forms.

Our systems may also process limited technical information such as IP address, browser information, timestamps, security events, form submission metadata, session identifiers and similar information needed to operate and protect the website.

3. Why we process personal information

We may process personal information to respond to enquiries, prepare estimates and quotations, deliver contracted services, communicate about projects, provide support, manage hosting and domains, issue invoices, maintain service records, secure our systems, prevent abuse, comply with legal obligations, resolve disputes and improve our services.

We aim to collect information that is adequate, relevant and reasonably necessary for the purpose for which it is processed.

4. How information is collected

Information may be collected directly from you through forms, email, telephone, messaging platforms, project documentation, account setup, support requests, invoices, meetings or files you provide. We may also receive information from service providers involved in delivering a service, for example a domain registrar, hosting provider, payment provider, courier platform or other integration requested for a project.

5. Lawful processing and consent

We process personal information where it is reasonably necessary to enter into or perform an agreement, where processing is required by law, where it protects a legitimate interest recognised by applicable law, or where valid consent has been provided. Where processing is based on consent, you may withdraw that consent, subject to lawful retention and processing requirements that continue to apply.

6. Sharing information with service providers

Buddy may use third-party providers to supply hosting, email, domains, backups, security, analytics, payment services, courier functionality, infrastructure or other services needed for a project. We only share information that is reasonably required for the relevant service. Those providers may process information under their own legal and privacy obligations.

We do not sell personal information.

7. International processing

Some technology providers or infrastructure used by Buddy or a client project may process or store information outside South Africa. Where cross-border processing occurs, Buddy will take reasonable steps to use providers and arrangements that support appropriate protection of personal information as required by applicable law.

8. Security

Buddy uses reasonable technical and organisational safeguards appropriate to the nature of the information and the services being provided. These may include access controls, password hashing, secure sessions, encrypted transport, prepared database statements, validation, anti-abuse controls, backups, audit records and restricted administrative access. No internet-connected system can be guaranteed to be completely secure.

9. Retention

We retain information only for as long as reasonably necessary for the purpose for which it was collected, to provide support, maintain appropriate business and financial records, meet contractual or legal requirements, resolve disputes and protect legitimate interests. Retention periods may differ depending on the type of record and the service involved.

10. Your rights

Subject to applicable law, you may request confirmation of whether Buddy holds personal information about you, request access to that information, ask for inaccurate information to be corrected, request deletion or destruction where legally appropriate, object to certain processing, or withdraw consent where consent is the basis for processing.

We may need to verify your identity before acting on a privacy request. Some information cannot be deleted immediately where Buddy is legally or contractually required to retain it.

11. Cookies and local storage

The website may use essential cookies or browser storage required for secure sessions, form protection, preferences and core functionality. If optional analytics or other non-essential tracking technologies are introduced later, the website should be updated to provide appropriate notice and controls.

12. Children

Buddy's general business services are not specifically directed at children. If a project requires the processing of children's personal information, the applicable project scope and privacy requirements must be assessed separately.

13. Security incidents

If Buddy becomes aware of a security compromise involving personal information, we will assess the incident and take reasonable steps required by applicable law, which may include containment, investigation and notification to affected parties or the Information Regulator where required.

14. Privacy requests and complaints

Privacy questions or requests can be sent to buddy@buddydevelopmentstudio.co.za. If you believe your personal information has been processed unlawfully, you may also have the right to complain to the Information Regulator of South Africa.

15. Changes to this policy

Buddy may update this policy when services, technology or legal requirements change. The effective date at the top of the page indicates the current published version.