What we collect, and what we don't.

The responsible party under POPIA is:

• Full name: Pocket Architects (Pty) Ltd, trading as Pocket Architects
• Legal status: a private company registered in the Republic of South Africa, registered 7 January 2026
• Registration number: 2026/006355/07
• VAT: not VAT-registered — our prices include no VAT and none is charged
• Registered physical address: 6 Dirk Slabbert Street, Riversdale, Meyerton, Gauteng, 1963
• Directors: Zandré van Antwerpen and Reinhardt van der Walt
• Email: info@pocket-architects.com
• Telephone / WhatsApp: +27 83 667 8190
• Website: pocket-architects.com

Information Officer: Reinhardt van der Walt, reachable at info@pocket-architects.com. Registration of the Information Officer with the Information Regulator is in progress.

• When you use the contact form: your name, email address, and whatever you write in the message. The form composes a WhatsApp message or an email — you choose which — so the content also reaches us through that channel.
• When you message us on WhatsApp: your WhatsApp number, your name as it appears there, and the messages themselves.
• When you become a client: the billing and contact details we need to invoice you and run your project.
• When you visit the site: anonymous usage statistics through Google Analytics — pages viewed, roughly where in the world you are, what kind of device you used.
• We do not collect card details. From 2027, subscription payments are processed by PayFast, who collect payment details directly. We never see or store your card number.

• To answer your enquiry — we cannot reply without a way to reach you.
• To carry out the work you have asked us to do, and to invoice for it.
• To keep the accounting and tax records the law requires us to keep.
• To understand which pages of this site are useful, in aggregate.

We do not sell your information, and we do not send marketing to people who have not asked for it.

These providers process personal information on our behalf, under their own security and privacy commitments:

• Google — Firebase Hosting (this website), Cloud Firestore (enquiries and client records), Firebase Authentication (our own admin sign-in), Google Workspace (our email, so any message you send us), and Google Analytics (anonymous usage statistics).
• WhatsApp / Meta — if you choose to send your enquiry over WhatsApp.
• Resend — the service that delivers automated email from our systems, such as billing and account notices. It receives your email address and the content of those messages.
• PayFast — subscription and invoice payments, from 2027.

Some of these providers store information on servers outside South Africa. Section 72 of POPIA allows this where the receiving party is bound by rules that give substantially similar protection. Google, Meta and Resend operate under such commitments through their data processing terms. By using this site or contacting us, you accept that your information may be processed outside South Africa on that basis.

• Enquiries that do not become projects: deleted after 12 months.
• Client records: kept for the life of the relationship, then for 5 years afterwards, because tax and company law require it.
• Data inside a subscription system that has been locked for non-payment: kept for 90 days, then permanently deleted. See clause 9 of the Subscription Terms.
• Analytics: kept in aggregate, with no way to identify you.
• Anything you ask us to delete, we delete, unless a law requires us to keep it — in which case we tell you which law and for how long.

Under POPIA you may ask us what information we hold about you, ask us to correct it, ask us to delete it, object to how we use it, and complain. Email info@pocket-architects.com. We acknowledge within 2 business days and respond in full within 30 days. There is no charge for a reasonable request.

This site uses Google Analytics cookies to count visits. They do not identify you by name. Your browser can block or delete them, and the site works normally if you do.

This site is aimed at businesses and is not intended for children under 18. We do not knowingly collect a child's personal information. If a child has sent us something, tell us and we will delete it.

The site is served over HTTPS. Our admin area is protected by Firebase authentication and server-side rules that allow only the owner account to read client data. Access is limited to people who need it. No system is perfect — if a breach ever affects your personal information, we will notify you and the Information Regulator as POPIA requires.

Tell us first and we will try to fix it. You may also complain to the Information Regulator (South Africa) at inforegulator.org.za.

When this policy changes, the version and date at the top of the page change with it. Material changes are announced by email to clients.