Privacy Policy

Extra Brains (Pty) Ltd ("Extra Brains," "we," "us," or "our") is a South African registered company. We are committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable South African legislation.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, services, and related offerings (collectively the "Services").

Information you provide directly:

• Name, email address, and phone number (via our contact form)
• Company name and project details you share with us
• Any other information you choose to provide in correspondence

Information collected automatically:

• IP address and approximate location
• Browser type, device type, and operating system
• Pages visited, time spent, and referring website
• Cookies and similar tracking technologies (see below)

We use the personal information we collect to:

• Respond to your enquiries and provide our services
• Communicate with you about projects, updates, or support
• Improve our website and the quality of our services
• Comply with legal obligations under South African law
• Analyse website usage through Vercel Analytics (anonymised data)

We process your information on the legal basis of your consent, contractual necessity, or our legitimate business interests, as applicable under POPIA.

We do not sell your personal information. We may share your data with:

• Service providers who assist in delivering our services (e.g., email providers, hosting, analytics)
• Legal authorities where required by South African law or to protect our rights

All third-party providers are bound by data processing agreements and are required to protect your information.

We use cookies and similar technologies to improve your browsing experience and analyse site traffic. You may disable cookies through your browser settings, though some features of the site may not function as intended.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. We retain your information only for as long as necessary to fulfil the purposes described in this policy or as required by law.

As a data subject under POPIA, you have the right to:

• Request access to the personal information we hold about you
• Request correction or deletion of your personal information
• Object to the processing of your personal information
• Withdraw your consent at any time
• Lodge a complaint with the Information Regulator of South Africa

If you have any questions about this Privacy Policy, wish to exercise your rights, or have a data-related concern, please contact us: