Privacy Policy

1. Responsible Party & Information Officer

This Privacy Policy is issued by Purple Ray Group (Pty) Ltd (Registration No. 2026/693010/07 · SARS Tax Ref: 9462540239), a company incorporated in the Republic of South Africa. We are the Responsible Party for the personal information described below.

Our interim Information Officer is the Founder, Josias Tlou, appointed in terms of section 55 of the Protection of Personal Information Act 4 of 2013 (POPIA) and registered with the Information Regulator. Queries: purpleraygroup@proton.me.

2. Scope

This policy applies to all Purple Ray Group properties and portfolio companies, including: purpleraygroup.co.za, devbyjay.vercel.app, tradepulsetech.vercel.app, Predesigns Clothing, Xentara Life, AlibiSafe, SafeGuard SA, REVLYTICS, Pro Driver Assist, Talka, TaxiFlow, MindOS and Aurora.

We process personal information lawfully, reasonably, and without infringing the right to privacy, in line with the eight POPIA conditions.

3. Information We Collect

We may collect the following types of information:

• Contact Data: Name, email, phone/WhatsApp, and details you submit via contact forms, quote requests, or B2B proposals.
• Business Data: Information you provide for service agreements, onboarding, and client deliverables.
• Billing Data: Invoice and payment references. We do not store card data; payments are by EFT to our Capitec account.
• App Data (AlibiSafe / SafeGuard SA): Captured media, GPS/location, timestamps, and device identifiers — processed only under your explicit consent and encrypted in transit and at rest.
• Technical Data: IP address, device type, pages viewed (anonymised analytics).

4. How We Use Your Information

• To deliver contracted services (websites, apps, Expert Advisors, automations).
• To respond to enquiries and issue proposals/invoices.
• To operate AlibiSafe evidence capture and route verified reports via SafeGuard SA at your initiation.
• To comply with legal and tax obligations (SARS, CIPC, B-BBEE, UIF).
• Marketing only with consent; opt-out available on every message.

5. Legal Basis for Processing (POPIA)

We process personal information on the bases of: (a) performance of a contract; (b) our legitimate business interest; (c) your consent (for marketing and for sensitive app data such as location/media); and (d) compliance with a legal obligation.

6. Disclosure & Recipients

We do not sell your data. We may share it with:

• Subprocessors: Hosting (Vercel/Firebase), email (Proton), form handling (Formspree) under POPIA-aligned terms.
• SAPS via SafeGuard SA: Only where you lodge a verified incident report (user-initiated).
• Authorities: Where legally compelled.

7. Security

We use TLS encryption in transit and encryption at rest; access on a least-privilege basis. AlibiSafe applies SHA-256 per-frame hashing, GPS/NTP lock, and dual-cloud encrypted storage. We hold professional-indemnity and cyber insurance. No internet transmission is 100% secure; we apply reasonable, industry-aligned safeguards.

8. Your Rights

You may:

• Access, correct, or delete your personal data.
• Withdraw consent at any time (marketing).
• Lodge a complaint with the Information Regulator (inforegulator.org.za).

To exercise these rights, email purpleraygroup@proton.me.

9. Data Retention

Client and contract data are retained for 5 years for tax purposes. App evidence is retained per your settings and deleted on request unless required for an active legal matter. Contact-form submissions are retained for up to 12 months.

10. Third-Party Links

Our sites link to portfolio companies and third parties. We are not responsible for their privacy practices; review their policies.

11. Changes

We may update this policy. Changes are posted here with a revised “Last updated” date. Continued use constitutes acceptance.