Privacy Policy

1. Who we are

Bolunga Systems ("Bolunga", "we", "us") is a South African technology company registered and operating from Unit 5 Platinum Close, Tsessebe Crescent, Corporate South Park, Midrand, 1685, South Africa. We are the responsible party (information controller) for the personal information processed through this website, https://www.bolunga.co.za.

Questions about this policy or your information can be sent to our Information Officer at info@bolunga.co.za or +27 11 207 3904.

2. Information we collect

Information you give us: when you submit a contact, quote or security-review form we collect your name, email address, phone number, the service you enquired about and your message. When you call or WhatsApp us we collect the content of that conversation.

Information stored on your device: our Bolunga AI assistant can remember your conversation so you can pick up where you left off. This memory lives only in your own browser and only while you allow Functional cookies in the cookie preferences manager.

Information we do not collect: we do not set advertising or analytics cookies, we do not buy personal information from third parties, and we do not collect special categories of personal information through this website.

3. Why we process it (lawful bases)

To respond to your enquiry and take steps at your request before entering into a contract (POPIA section 11(1)(b) and (c); GDPR Article 6(1)(b)).

To meet legal obligations such as tax and accounting records (POPIA section 11(1)(d); GDPR Article 6(1)(c)).

Where you have consented, to remember your assistant conversation in your browser (POPIA section 11(1)(a); GDPR Article 6(1)(a)). You may withdraw this at any time in the cookie preferences manager in the footer.

For our legitimate interest in securing our systems and preventing fraud and abuse (GDPR Article 6(1)(f)), which does not override your rights.

4. Cookies and similar storage

We keep cookies to a minimum. Strictly necessary storage keeps the site secure and remembers your cookie choice. Optional functional storage (the assistant conversation memory) is only used with your consent. No analytics or marketing cookies are set by this website.

You can accept, refuse or change these choices at any time using "Cookie preferences" in the footer of every page. Refusing optional storage does not affect your ability to use the site or submit forms.

5. Who we share it with

We do not sell personal information. We share it only with operators who help us run the site and communicate with you: our hosting provider (Render), our email delivery provider for form messages, and professional advisers where the law requires.

Each operator is bound by contract to process information only on our instructions and with appropriate security (POPIA section 20-21; GDPR Article 28).

6. Transfers outside South Africa

Some of our operators host or process information outside South Africa. Where we do, we rely on POPIA section 72: the recipient is subject to binding corporate rules or an adequate level of protection equivalent to POPIA, or the transfer is necessary to perform our agreement with you.

7. How long we keep it

Enquiry records are kept for as long as needed to serve you as a client or prospect, and thereafter for the period required by law (typically five years for tax-related records). Assistant conversation memory stays in your browser until you clear it or switch off Functional cookies. Security logs are kept for twelve months.

8. Security

We protect personal information with appropriate technical and organisational measures: encryption in transit (HTTPS), hardened server configuration, least-privilege access, rate limiting and spam protection on public forms, and staff confidentiality obligations. No method of transmission or storage is 100% secure; if a breach occurs we will notify the Information Regulator and affected individuals as POPIA section 22 requires.

9. Your rights

Under POPIA (sections 5, 23-24) and, where applicable, the GDPR (Articles 15-22), you may: access the personal information we hold about you; require correction or deletion of inaccurate or unlawfully held information; object to processing; withdraw consent where processing is based on consent; and complain to the Information Regulator of South Africa (or your local supervisory authority in the EU/EEA).

To exercise any right, email info@bolunga.co.za with "Privacy request" in the subject. We respond within 30 days and never charge for a first request.

10. Children

This website is not directed at children under 18 and we do not knowingly collect their information. If you believe a child has submitted information to us, contact us and we will delete it.

11. Changes to this policy

We may update this policy as our services or the law change. The date below shows the current version; material changes will be highlighted on this page before they take effect.