Siteflow 360° Privacy Policy
Last Updated: 23 March 2026

1. Introduction
Siteflow Consulting & Technologies (Pty) Ltd ("we," "our," or "us"), registration number 2025/567186/07, is committed to protecting your privacy and complying with the Protection of Personal Information Act 4 of 2013 (POPIA) and all applicable South African data protection legislation.
This policy explains how we collect, use, store, and protect personal information obtained through our website (siteflow.org.za), our Siteflow 360° platform, and our professional consulting services.

2. Information We Collect
We collect personal information necessary to provide our services, including:
Identity Information: Full name, email address, phone number, and professional designation.
Professional Information: Company name, role, portfolio size, and project details provided during inquiries or onboarding.
Site Data: High-resolution photographs, 360° panoramas, GPS location data, and project annotations uploaded by users for site documentation and oversight.
Technical Data: Device information, IP address, browser type, and usage data are collected automatically when you use our website or platform.
Communication Records: Enquiry messages, support requests, and project correspondence.

3. How We Use Your Information
Your personal information is used solely to:
• Provide and operate the Siteflow 360° platform and consulting services
• Generate technical reports, dashboards, and audit documentation
• Facilitate remote oversight and stakeholder communication
• Process subscription payments securely via Paystack
• Respond to enquiries and provide customer support
• Improve platform performance, security, and user experience
• Comply with legal and regulatory obligations
We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Data Storage & Security
Your data is stored on Amazon Web Services (AWS) infrastructure located in Cape Town, South Africa. We implement industry-standard security measures, including:
• Encryption at rest and in transit (AES-256)
• Role-based access controls
• Regular security monitoring and audits
• Secure backup and disaster recovery procedures
All data remains within South Africa unless explicitly agreed otherwise in writing.

5. Third-Party Services
We use the following third-party services. Each operates under its own privacy policies:
• Amazon Web Services (AWS)—cloud infrastructure and data storage (Cape Town region)
• Paystack—secure payment processing for subscriptions
• Cupix—360° reality capture platform (data processed subject to Cupix's privacy policy)
We do not use Google Firebase for data storage or processing.

6. Cookies

Our website uses cookies to ensure basic functionality, remember your preferences, and analyze site usage. You may disable cookies through your browser settings; however, this may affect certain website features.
Types of cookies we use:
• Essential cookies—required for the website to function
• Analytics cookies—help us understand how visitors use the site (anonymised data only)

7. Your Rights Under POPIA
As a data subject under POPIA, you have the right to:
• Access—request a copy of the personal information we hold about you
• Correction—request correction of inaccurate or incomplete information
• Deletion—request deletion of your personal information, subject to legal retention requirements
• Objection—object to the processing of your personal information
• Complaint—lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, contact us at info@siteflow.org.za. We will respond within 30 days.

8. Data Retention
• Active account data: retained for the duration of your subscription
• Project and site data: retained for 12 months after account closure, then permanently deleted
• Enquiry and communication records: retained for 3 years
• Financial transaction records: retained for 5 years in accordance with tax legislation

9. Children's Privacy
Our services are not directed at persons under the age of 18. We do not knowingly collect personal information from minors.

10. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email to registered users and posted on this page with an updated date. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact & Complaints
For queries, requests, or complaints regarding our data practices:
André Muller | Pr. Techni. Eng.
Information Officer—Siteflow Consulting & Technologies
Email: info@siteflow.org.za
Phone: +27 (0)72 322 8741
Information Regulator of South Africa
For complaints that cannot be resolved directly with us:
Email: inforeg@justice.gov.za
Website: www.justice.gov.za/inforeg