Privacy Policy

Rapid Roots is a technology, design, development, automation and AI agency based in South Africa. For this website and the information described here, Rapid Roots is the responsible party under POPIA.

Our Information Officer is Warona Phale, Chief Executive Officer. You can reach us about anything in this policy at rapidrootss [at] gmail [dot] com.

• What you send us. The contact form on this site doesn’t store anything on our servers. It writes a message in your browser and opens WhatsApp or your email app for you to send. When you send it, we receive what that message contains, such as your name, phone number or email address, what you want built, your timing and the call time you suggest, and anything else you add.
• Project information. If we work together, the details you share with us to plan, build and support your project.
• How the site is used, if you allow it. With your permission (asked the first time you visit), the live site uses Google Analytics, which uses cookies to tell us which pages are visited, roughly where visitors are (country or city level), and which devices and browsers they use. It does not tell us who you are, and nothing is loaded if you say no.
• Our own visit counter. Alongside that, the site keeps a simple count of its own: which page was viewed, which website sent you there, your country, and whether you’re on a phone, tablet or computer. It uses no cookies and stores no IP address. To count unique visitors, your IP address and browser are turned into a one-way code that changes every day, so a visit can’t be traced back to you or linked across days. It also counts taps on the contact form’s send buttons and the WhatsApp chat button, not what you send.
• Technical logs. Our hosting provider, Vercel, keeps standard server logs (such as IP address, browser type and the pages requested) to run the site securely.
• Settings on your device. Your light or dark theme and lite mode choices are saved in your own browser’s storage. They never leave your device.

• To reply to your enquiry, arrange the call you asked for, and prepare a quote.
• To plan, build, deliver and support projects we take on for you.
• To understand how the site is used, so we can improve it.
• To keep the site secure and working properly.
• To meet our legal and accounting obligations.

We only use your information for these purposes. We don’t sell it, and we don’t send marketing messages unless you’ve asked for them.

We only share personal information with services that help us run the site and our business:

• Vercel hosts the website.
• Google provides analytics, and Gmail if you email us.
• Supabase stores the anonymous visit counts described above.
• WhatsApp (Meta) carries your message if you choose to contact us on WhatsApp.
• Microlink and thum.io provide the screenshots of our projects shown on the site. When your browser loads those images, those services receive the technical details any website receives, such as your IP address.

Some of these providers store information outside South Africa. Where that happens, we rely on providers that are bound by data protection laws or agreements that give a level of protection comparable to POPIA. We may also disclose information where the law requires it.

We only use cookies for analytics, and only if you allow it. Everything else the site remembers stays in your own browser and never reaches us.

Our own visit counter uses no cookies at all (see section 2). You can change your mind about analytics at any time, and you can also block or delete cookies in your browser settings.

We keep enquiries and project information for as long as we need them to work with you, and afterwards only as long as the law requires (for example, for tax and accounting records). Analytics data is kept according to our Google Analytics retention settings; our own daily visit counts expire after about 13 months. When information is no longer needed, we delete it or make it anonymous.

We take reasonable technical and organisational measures to keep personal information safe, including encrypted connections (HTTPS) across the whole site, limited access to project information, and reputable service providers. No system is perfectly secure, but if a breach affecting your information ever happens, we will tell you and the Information Regulator as POPIA requires.

Under POPIA you have the right to:

• ask whether we hold personal information about you, and for a copy of it;
• ask us to correct or update it;
• ask us to delete it, where we no longer have a reason to keep it;
• object to us using it, including for any marketing;
• complain to the Information Regulator.

To use any of these rights, email us at rapidrootss [at] gmail [dot] com. We’ll respond within a reasonable time, and we may need to confirm who you are first.

Asking us to delete your information. Tap below to open a ready-written request in your email app, add your name and how you contacted us, and send it. We’ll delete what we hold within 30 days and confirm by email, unless the law requires us to keep something (such as invoices), in which case we’ll tell you what and why. The anonymous visit counts can’t be linked to you, so there’s nothing to delete there.

If you’re not happy with how we’ve handled your information, you can complain to the Information Regulator (South Africa) at inforegulator.org.za.

This website and our services are meant for businesses and adults. We don’t knowingly collect personal information from children.

The rules for using this website are in our terms of use.

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.