Privacy Policy

Effective date: June 2026  ·  Last updated: June 2026

1. Who We Are

Bopaki Group (Pty) Ltd ("Bopaki Group", "we", "us", or "our") is a South African technology company registered under the laws of the Republic of South Africa (Reg. No. 2020/885992/07). We build the Municipal Compliance Management Portal (MCMP) — sovereign digital infrastructure for South African municipal compliance, licensing, and governance.

This Privacy Policy applies to information collected through our website at bopakigroup.com and any related services, communications, or platforms we operate.

---

2. Personal Information We Collect

When you interact with our website, we may collect the following personal information:

2.1 Information you provide directly

• First name and last name
• Email address
• Phone number
• Organisation or municipality name
• The nature of your enquiry or message
• Demo booking details (date, time, Google Meet link)

2.2 Information collected automatically

• Website usage data (pages visited, time on site, referral source) — collected only with your explicit POPIA consent via our cookie notice
• Browser type and device information
• IP address (anonymised where possible)

---

3. Why We Collect Your Information

We collect and process personal information for the following purposes:

• To respond to your enquiry or request for information
• To schedule and conduct platform demonstrations
• To send you relevant communications about MCMP and our services
• To manage our client and prospect relationships
• To improve our website and services
• To comply with our legal obligations under South African law

We will not use your personal information for any purpose other than those stated above without your prior consent.

---

4. Legal Basis for Processing

Under POPIA, we process your personal information on the following lawful grounds:

• Consent — where you have given us explicit consent (e.g., submitting the contact form or accepting cookies)
• Legitimate interests — to operate our business, respond to enquiries, and communicate with prospective clients
• Legal obligation — where processing is required to comply with South African law

---

5. How We Store and Protect Your Information

Your personal information is stored securely within Google Workspace infrastructure, which includes Google Forms, Google Sheets, and Gmail. Google complies with internationally recognised security standards including ISO 27001 and SOC 2.

We implement the following safeguards:

• Access to personal information is restricted to authorised personnel only
• Data is stored on Google's servers, which are subject to Google's security and privacy policies
• We do not store payment information — no financial data is collected through this website
• Our website is served over HTTPS (SSL/TLS encryption)

---

6. Third-Party Service Providers

We use the following third-party services which may process your personal information on our behalf. Each is bound by their own privacy policies and applicable data protection laws:

• Google LLC — Google Forms (form collection), Google Sheets (data storage), Gmail (email communications), Google Calendar (demo scheduling), Google Analytics (website analytics — consent-gated)
• Google Firebase — website hosting (bopakigroup.com)
• WhatsApp (Meta Platforms) — optional communication channel if you choose to contact us via WhatsApp

We do not sell, rent, or trade your personal information to any third party for marketing purposes. We do not share your information with any party not listed above without your explicit consent.

---

7. Cookies and Analytics

Our website uses Google Analytics (GA4) to understand how visitors use bopakigroup.com. This service uses cookies to collect anonymised usage data.

In accordance with POPIA, we request your explicit consent before activating Google Analytics. You may accept or decline via the cookie notice displayed on your first visit. You may change your preference at any time by clearing your browser's local storage for bopakigroup.com.

If you decline analytics cookies, no usage data is collected and your visit remains fully anonymous.

---

8. How Long We Retain Your Information

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

• Contact form enquiries and correspondence — retained for up to 3 years from last contact
• Demo booking records — retained for up to 1 year
• Analytics data (where consented) — retained per Google Analytics' default retention settings (up to 14 months)

When personal information is no longer required, it is securely deleted from our systems.

---

9. Your Rights Under POPIA

As a data subject under the Protection of Personal Information Act, you have the following rights:

• Right of access — you may request a copy of the personal information we hold about you
• Right to correction — you may request that inaccurate or incomplete information be corrected
• Right to deletion — you may request that your personal information be deleted, subject to any legal retention obligations
• Right to object — you may object to the processing of your personal information in certain circumstances
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing

To exercise any of these rights, contact our Information Officer at info@bopakigroup.com. We will respond within a reasonable time and no later than 30 days.

---

10. Complaints and the Information Regulator

If you are not satisfied with how we have handled your personal information, you have the right to lodge a complaint with the Information Regulator of South Africa:

---

11. Data Sovereignty

Bopaki Group is committed to the principle of data sovereignty. The MCMP platform and all associated client data are hosted exclusively within the Republic of South Africa, using Google Cloud infrastructure in the africa-south1 region (Johannesburg). We do not permit client or platform data to be transferred to, stored in, or processed by servers located outside South Africa.

Website enquiry data collected through our contact forms is stored within Google Workspace services configured for South African use. We do not authorise or permit cross-border transfers of personal information collected through this Website.

This commitment to in-country data processing is fundamental to our offering for South African municipalities and aligns with the data sovereignty requirements of government entities operating under South African law.

---

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website following any update constitutes acceptance of the revised policy.

---

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact our Information Officer:

• Email: info@bopakigroup.com
• Phone: +27 83 222 6043
• Website: bopakigroup.com/contact