PRIVACY POLICY
DevLabs CC
www.devlabs.co.za
Effective Date: 17 February 2026
1. Introduction
DevLabs CC (“DevLabs”, “we”, “us”, or “our”) is a software development consultancy registered in South Africa and based in Cape Town. We are committed to protecting the privacy and personal information of our clients, website visitors, and users of our products and services.
This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African legislation.
2. Responsible Party
The responsible party for the processing of your personal information is:
DevLabs CC
Unit A13, Westlake Square
1 Westlake Drive, Cape Town, 7945
Email: dan@devlabs.co.za
Phone: 087 809 0994
3. Information We Collect
3.1 Information You Provide to Us
We may collect personal information that you voluntarily provide when you:
- Contact us via our website, email, or telephone
- Engage us for software development, web design, hosting, or consulting services
- Register for or use any of our SaaS products or applications
- Subscribe to our communications or newsletters
- Enter into a service agreement or contract with us
This information may include:
- Full name and surname
- Email address
- Phone number
- Physical or postal address
- Company or business name
- Payment and billing information
- Any other information you choose to provide in correspondence with us
3.2 Information Collected Automatically
When you visit our website (devlabs.co.za) or use our products, we may automatically collect certain technical information, including:
- IP address and approximate geographic location
- Browser type and version
- Device type and operating system
- Pages visited, time spent, and navigation paths
- Referring website or source
- Cookies and similar tracking technologies (see Section 8)
3.3 Information from Third Parties
We may receive personal information about you from third parties such as hosting providers, analytics services, or payment processors, solely in connection with providing our services to you.
4. Purpose of Processing
We process your personal information for the following lawful purposes:
- To provide, maintain, and improve our services, including web development, app development, hosting, SEO, and API development
- To communicate with you regarding projects, support, and service updates
- To process payments and manage invoicing
- To fulfil our contractual obligations to you
- To comply with applicable laws and regulations
- To protect our legitimate interests, including the security of our systems and services
- To send you marketing communications (only with your prior consent)
- To analyse website traffic and improve user experience
5. Legal Basis for Processing
Under POPIA, we process your personal information based on one or more of the following conditions:
- Your consent (which you may withdraw at any time)
- The processing is necessary to fulfil a contract with you
- The processing is necessary to comply with a legal obligation
- The processing is necessary to protect your legitimate interests or those of a third party
6. Sharing of Personal Information
We do not sell, rent, or trade your personal information. We may share your information with the following categories of recipients, only to the extent necessary:
- Trusted third-party service providers who assist us in operating our business (e.g., hosting providers, payment gateways, analytics services)
- Professional advisors such as accountants or legal counsel
- Regulatory authorities or law enforcement, where required by law
- Business partners, with your prior consent
Where we share information with third-party service providers, we ensure appropriate agreements are in place to protect your personal information.
7. Cross-Border Transfers
Some of the third-party services we use (such as cloud hosting, analytics, and communication tools) may process data outside of South Africa. Where this occurs, we take reasonable steps to ensure that adequate safeguards are in place to protect your personal information in accordance with POPIA.
8. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to enhance your browsing experience, analyse site traffic, and understand how visitors interact with our website. You can manage your cookie preferences through your browser settings. Please note that disabling cookies may affect the functionality of certain parts of our website.
9. Data Retention
We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. When your information is no longer needed, we will securely delete or anonymise it. Specific retention periods include:
- Client project data: retained for the duration of the engagement and for a reasonable period thereafter for support and legal purposes
- Financial and billing records: retained as required by the South African Revenue Service (SARS) and applicable tax legislation
- Website analytics data: retained in anonymised or aggregated form
- Marketing consent records: retained for as long as you remain subscribed
10. Data Security
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or alteration. These measures include:
- SSL/TLS encryption on our websites and applications
- Secure server infrastructure with regular updates and monitoring
- Access controls limiting who can view personal information
- Regular backups and disaster recovery procedures
While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
11. Your Rights Under POPIA
As a data subject, you have the following rights in relation to your personal information:
- The right to be informed about what personal information we hold about you
- The right to request access to your personal information
- The right to request correction of inaccurate, irrelevant, excessive, out-of-date, or misleading information
- The right to request deletion or destruction of your personal information
- The right to object to the processing of your personal information
- The right to withdraw consent at any time (where processing is based on consent)
- The right to lodge a complaint with the Information Regulator
To exercise any of these rights, please contact us at dan@devlabs.co.za. We will respond to your request within a reasonable time and in accordance with POPIA.
12. Information Regulator
If you are not satisfied with how we have handled your personal information or a request you have made, you have the right to lodge a complaint with the Information Regulator (South Africa):
The Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: enquiries@inforegulator.org.za
Website: www.justice.gov.za/inforeg
13. Third-Party Links
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
14. Children’s Privacy
Our services are not directed at children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without appropriate consent, we will take steps to delete that information promptly.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. Any changes will be posted on our website with an updated effective date. We encourage you to review this policy periodically.
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:
DevLabs CC
Unit A13, Westlake Square
1 Westlake Drive, Cape Town, 7945
Email: dan@devlabs.co.za
Phone: 087 809 0994