Privacy Policy

1. Introduction

Chrysalinks Group ("we", "us", "our") is committed to protecting your personal information in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA). This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our website, platform, and services.

By using our services, you consent to the practices described in this policy. If you do not agree, please discontinue use immediately.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Full name, email address, phone number
• Business name, industry, and website details
• Billing and payment information (processed securely via third-party providers)
• Referral data (names and contacts of referred individuals)
• Questionnaire responses (business details for website creation)

2.2 Non-Personal Information

• Browser type, device information, and operating system
• IP address and geographic location (country/city level)
• Pages visited, time spent, and navigation patterns
• Referral source and campaign tracking data

3. How We Use Your Information

We use your information for the following purposes:

Purpose	Legal Basis (POPIA)
Provide and deliver our services (website creation, training, coaching)	Performance of contract
Process payments and manage subscriptions	Performance of contract
Track referrals and manage partner relationships	Performance of contract / Consent
Send service updates, marketing, and promotional communications	Consent / Legitimate interest
Improve our platform, services, and user experience	Legitimate interest
Comply with legal obligations and resolve disputes	Legal obligation

4. Data Sharing

We do not sell your personal information. We may share your data with:

• Service Providers: Cloudflare (hosting), Google Sheets (data storage), payment processors — all bound by data processing agreements
• Partners: With your explicit consent, referral partners may receive your name and email for follow-up
• Legal Authorities: When required by law, court order, or regulatory authority

5. Data Security

We implement appropriate technical and organisational measures to protect your data:

• Encrypted data transmission (TLS/SSL)
• Authenticated API access only
• Regular backups of Google Sheets data
• Role-based access controls for internal staff
• Regular security reviews and updates

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Data is retained for a maximum of 5 years after account deletion to comply with legal obligations. After this period, data is securely deleted or anonymised.

7. Your Rights (POPIA)

Under POPIA, you have the right to:

• Access: Request a copy of all personal information we hold about you
• Correction: Request correction or deletion of inaccurate or incomplete data
• Deletion: Request deletion of your personal information (subject to legal retention)
• Objection: Object to the processing of your data for specific purposes
• Portability: Request your data in a structured, machine-readable format
• Complaint: Lodge a complaint with the Information Regulator if you believe your rights have been violated

To exercise any of these rights, contact us at privacy@chrysalinks.co.za.

8. Cookies and Tracking

We use cookies to improve your experience. For full details, see our Cookie Policy.

9. International Data Transfers

Our services are hosted in South Africa and may use international service providers (e.g., Cloudflare). Where data is transferred outside South Africa, we ensure appropriate safeguards are in place as required by POPIA.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website. The "Last Updated" date at the top reflects the most recent revision.

12. Contact Us

For questions about this Privacy Policy or to exercise your data rights:

• Email: privacy@chrysalinks.co.za
• General: info@chrysalinks.co.za
• Information Regulator: inforegulator.org.za