Privacy Policy

What we collect, and what we don't.

This policy explains how we handle personal information under the Protection of Personal Information Act 4 of 2013 (POPIA).

Version 1.1 · Last updated 1 November 2026

Draft pending legal review. This document has been prepared in plain language and is awaiting review by a South African attorney. Highlighted fields are still to be completed. Nothing here is legal advice.

1.Who is responsible for your information

The responsible party under POPIA is:

  • Full name: Pocket Architects (Pty) Ltd, trading as Pocket Architects
  • Legal status: a private company registered in the Republic of South Africa, registered 7 January 2026
  • Registration number: 2026/006355/07
  • VAT: not VAT-registered — our prices include no VAT and none is charged
  • Registered physical address: 6 Dirk Slabbert Street, Riversdale, Meyerton, Gauteng, 1963
  • Directors: Zandré van Antwerpen and Reinhardt van der Walt
  • Email: info@pocket-architects.com
  • Telephone / WhatsApp: +27 83 667 8190
  • Website: pocket-architects.com

Information Officer: Reinhardt van der Walt, reachable at info@pocket-architects.com. Registration of the Information Officer with the Information Regulator is in progress.

This policy covers our website and client services. Our Android apps have their own policies: Resepte privacy policy.

2.What we collect

  • When you use the enquiry form: your name, email address, optional phone number, and your answers about the project (service, business type, features, timeline, optional budget range, and anything else you write). We store the enquiry in our database (Google Cloud Firestore) and email it to us through Resend. You will also get an automatic confirmation email. For now the form may instead open a pre-filled WhatsApp message or an email for you to send yourself, in which case the content reaches us through that channel.
  • When you message us on WhatsApp: your WhatsApp number, your name as it appears there, and the messages themselves.
  • When you become a client: the billing and contact details we need to invoice you and run your project.
  • When you visit the site: anonymous usage statistics through Google Analytics — pages viewed, roughly where in the world you are, what kind of device you used.
  • Also when you visit: Microsoft Clarity records how pages are used (clicks, scrolling and anonymised session replays) so we can fix confusing pages. The enquiry form is masked, so what you type into it is not recorded.
  • We do not collect card details. From 2027, subscription payments are processed by PayFast, who collect payment details directly. We never see or store your card number.

3.Why we use it

  • To answer your enquiry — we cannot reply without a way to reach you.
  • To carry out the work you have asked us to do, and to invoice for it.
  • To keep the accounting and tax records the law requires us to keep.
  • To understand which pages of this site are useful, in aggregate.

We do not sell your information, and we do not send marketing to people who have not asked for it.

4.Who else handles it

These providers process personal information on our behalf, under their own security and privacy commitments:

  • Google — Firebase Hosting (this website), Cloud Firestore and Cloud Functions (where we store enquiries and run the code that emails them), Firebase Authentication (our own admin sign-in), Google Workspace (our email, so any message you send us), and Google Analytics (anonymous usage statistics).
  • Microsoft — Clarity, which records anonymised site usage (clicks, scrolling, session replays) to help us improve the site. Form fields are masked.
  • WhatsApp / Meta — if you choose to send your enquiry over WhatsApp.
  • Resend — the service that delivers email from our systems: your enquiry to us, the confirmation we send you, and notices such as billing and account messages. It receives your email address and the content of those messages.
  • PayFast — subscription and invoice payments, from 2027.

ATTORNEY TO CONFIRM: whether analytics (Google Analytics, Microsoft Clarity) needs a consent banner, and the Resend / Clarity operator wording

5.Information sent outside South Africa

Some of these providers store information on servers outside South Africa. Section 72 of POPIA allows this where the receiving party is bound by rules that give substantially similar protection. Google, Meta and Resend operate under such commitments through their data processing terms. By using this site or contacting us, you accept that your information may be processed outside South Africa on that basis.

6.How long we keep it

  • Enquiries that do not become projects: deleted after 12 months.
  • Client records: kept for the life of the relationship, then for 5 years afterwards, because tax and company law require it.
  • Data inside a subscription system that has been locked for non-payment: kept for 90 days, then permanently deleted. See clause 9 of the Subscription Terms.
  • Analytics (Google Analytics and Microsoft Clarity): kept in aggregate or anonymised, with no way to identify you by name.
  • Anything you ask us to delete, we delete, unless a law requires us to keep it — in which case we tell you which law and for how long.

7.Your rights

Under POPIA you may ask us what information we hold about you, ask us to correct it, ask us to delete it, object to how we use it, and complain. Email info@pocket-architects.com. We acknowledge within 2 business days and respond in full within 30 days. There is no charge for a reasonable request.

8.Cookies

This site uses Google Analytics and Microsoft Clarity cookies to count visits and see how pages are used. They do not identify you by name. Your browser can block or delete them, and the site works normally if you do. While you fill in the enquiry form we also keep your unfinished answers in your browser's session storage (this tab only) so you do not lose them; it is cleared when you close the tab or send the form.

9.Children

This site is aimed at businesses and is not intended for children under 18. We do not knowingly collect a child's personal information. If a child has sent us something, tell us and we will delete it.

10.Security

The site is served over HTTPS. Our admin area is protected by Firebase authentication and server-side rules that allow only the owner account to read client data. Access is limited to people who need it. No system is perfect — if a breach ever affects your personal information, we will notify you and the Information Regulator as POPIA requires.

11.Complaints

Tell us first and we will try to fix it. You may also complain to the Information Regulator (South Africa) at inforegulator.org.za.

12.Changes to this policy

When this policy changes, the version and date at the top of the page change with it. Material changes are announced by email to clients.


Questions about this document? Email info@pocket-architects.com or call +27 83 667 8190. The other documents are listed on the legal page.