POPIA Compliance

BuildAhead (Pty) Ltd, Cape Town, South Africa, is the responsible party for personal information collected through buildahead.company and through our client engagements. Enquiries about data processing can be sent to hello@buildahead.company.

We collect personal information only for the specific purposes stated at the point of collection — responding to an enquiry, delivering a requested report, or sending a newsletter you subscribed to. We do not repurpose that information for unrelated uses.

Our forms ask only for what is necessary. The contact form requires a name, email and message. The AI Readiness Score and website audit require an email address so we can deliver the result. IP addresses are stored only as a one-way hash for abuse prevention.

Marketing communication is sent only where you have opted in, and every message carries a one-click unsubscribe link that is honoured immediately. Enquiry handling and service delivery are processed on the basis of taking steps at your request and our legitimate business interest in responding to you.

You can ask us to correct anything we hold about you at any time. Our Privacy Policy describes in plain language what we collect, why, how long we keep it and who processes it on our behalf.

• All traffic to and from the site is encrypted in transit (HTTPS).
• Records are held in an access-controlled database with row-level security policies.
• Admin areas require authentication; access is limited to named BuildAhead team members.
• Dependencies and configuration are scanned regularly for known vulnerabilities.
• Operators who process data on our behalf are bound by written confidentiality obligations.

Some of our hosting and email operators store data outside South Africa. Where that occurs, we use providers subject to laws or binding agreements that give a level of protection substantially similar to POPIA, as permitted by section 72 of the Act.

You may request access to, correction of, or deletion of your personal information by emailing hello@buildahead.company. We respond to verified requests within 30 days.

If personal information under our control is accessed or acquired by an unauthorised person, we will notify the Information Regulator and affected data subjects as soon as reasonably possible after establishing the scope of the incident.

If you are not satisfied with how we have handled your information, you may lodge a complaint with the Information Regulator of South Africa at enquiries@inforegulator.org.za.