Privacy Policy

Clever Assets (Pty) Ltd
Last Updated: January 2025

  1. Introduction

Clever Assets (Pty) Ltd ("Clever Assets", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.cleverassets.co.za) and use our services.

We operate under South African law, including the Protection of Personal Information Act (POPIA), and are committed to ensuring your personal information is handled responsibly and lawfully.

  1. Information We Collect

Personal Information You Provide

We may collect the following information when you interact with our services:

• Contact Information: Name, email address, phone number
• Business Information: Company name, job title, industry
• Account Credentials: Username and password for platform access
• Consultation Data: Information shared during consulting engagements
• Communication Records: Correspondence via email, forms, or other channels
• Payment Information: Billing details for service subscriptions

Automatically Collected Information

When you access our website or platform, we may automatically collect:

• IP address and geographic location
• Browser type and version
• Device information and operating system
• Pages visited and time spent on site
• Referring website or source
• Platform usage patterns and feature interactions

  1. How We Use Your Information

We process your personal information to:

• Provide and maintain our consulting and software services
• Create and manage your platform account
• Process transactions and send related confirmations
• Respond to inquiries and provide customer support
• Send service-related communications and updates
• Deliver newsletters and marketing communications (with your consent)
• Improve our website, platform, and service offerings
• Analyse usage trends and optimise user experience
• Comply with legal obligations and regulatory requirements
• Detect and prevent fraud or security threats

  1. Legal Basis for Processing (POPIA Compliance)

We process your personal information based on one or more of the following lawful grounds:

• Consent: You have given clear consent for specific purposes
• Contract: Processing is necessary to fulfil a contract with you
• Legal Obligation: Processing is required to comply with the law
• Legitimate Interest: Processing is necessary for our legitimate business interests, provided your rights are not overridden

  1. Third-Party Service Providers

We may share your information with trusted third parties who assist in operating our business:

• Supabase – Database hosting and authentication
• Payment Processors – Transaction processing
• Analytics Services – Website and platform analytics
• Email Services – Communication delivery

We require all third parties to respect the security of your personal information and treat it in accordance with applicable laws. Your payment card details are processed directly by our payment providers and are not stored on our systems.

  1. Data Security

We implement appropriate technical and organisational measures to protect your personal information:

• Encrypted data transmission (SSL/TLS)
• Secure database hosting with row-level security
• Access controls and authentication protocols
• Regular security assessments and monitoring
• Employee confidentiality obligations

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

  1. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:

• Account Data: Retained while your account is active and for a reasonable period thereafter
• Transaction Records: Retained as required for tax and accounting purposes (typically 5-7 years)
• Communication Records: Retained for customer service and legal purposes
• Analytics Data: Retained in anonymised form for trend analysis

  1. Your Rights Under POPIA

As a data subject under South African law, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Object: Object to processing of your personal information in certain circumstances
• Restriction: Request restriction of processing in specific situations
• Data Portability: Request transfer of your data in a structured, commonly used format
• Withdraw Consent: Withdraw previously given consent at any time

To exercise any of these rights, please contact us at legal@cleverassets.co.za. We will respond to your request within a reasonable timeframe as required by POPIA.

  1. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

• Essential Cookies: Enable core functionality and security features
• Analytics Cookies: Help us understand how visitors interact with our website
• Preference Cookies: Remember your settings and preferences

You can control cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

  1. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

  1. International Data Transfers

Your information may be transferred to and processed in countries outside South Africa where our service providers operate. We ensure appropriate safeguards are in place to protect your information in accordance with POPIA requirements.

  1. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website with a revised "Last Updated" date. We encourage you to review this policy periodically.

  1. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Clever Assets (Pty) Ltd
Registration Number: 2025/605250/07
Email: legal@cleverassets.co.za
Website: www.cleverassets.co.za

  1. Information Regulator

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Information Regulator:

Information Regulator (South Africa)
Website: www.justice.gov.za/inforeg
Email: complaints.IR@justice.gov.za