Privacy Policy

Our Information Officer is responsible for ensuring our compliance with POPIA. You can reach the Information Officer, and direct any privacy query, request, or complaint, at hello@elythra.io.

We collect only the personal information we need for the purposes described in this Policy. This includes:

Information you give us

• Contact and enquiry details you submit through our forms or by email, such as your name, email address, company or organisation name, and the details of your project or request.
• Any further information you choose to share with us in the course of an enquiry, proposal, or engagement.

Information we collect automatically

• Technical and usage information generated when you visit the site, such as your IP address, device and browser type, referring pages, and the pages you view.
• Information collected through cookies and similar technologies, as described in our Cookie Policy.

We process your personal information for the following purposes, each supported by a lawful basis under POPIA (your consent, the performance of a contract, our legitimate interests, or compliance with a legal obligation):

• To respond to your enquiries and communicate with you about a potential or existing engagement.
• To provide, manage, and improve our services and our website.
• To maintain the security and integrity of our systems and to prevent misuse.
• To keep records and comply with our legal, regulatory, and accounting obligations.

We do not sell your personal information, and we do not use it for automated decision-making that produces legal or similarly significant effects.

We share personal information only where necessary, and only with parties who are bound to protect it:

• Service providers ("operators" under POPIA) who process information on our behalf under written contract, such as hosting, email, and analytics providers.
• Professional advisers, such as our accountants and attorneys, where required.
• Authorities or other parties where we are required to disclose by law, regulation, or legal process.

Some of our service providers may store or process information outside South Africa. Where we transfer personal information across borders, we do so in accordance with section 72 of POPIA, and take reasonable steps to ensure it receives an adequate level of protection through appropriate safeguards or your consent.

We maintain appropriate, reasonable technical and organisational measures to safeguard personal information against loss, unauthorised access, and unlawful processing, as required by section 19 of POPIA. No method of transmission or storage is completely secure, but we work to protect your information and to review our safeguards regularly.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting, or reporting requirements, after which it is securely deleted or de-identified.

Subject to applicable law, you have the right to:

• Request access to the personal information we hold about you.
• Request that we correct or delete your personal information.
• Object to the processing of your personal information in certain circumstances.
• Withdraw consent, where processing is based on consent, without affecting prior processing.
• Lodge a complaint with the Information Regulator.

To exercise any of these rights, contact us at hello@elythra.io. You may also contact the Information Regulator (South Africa) at inforeg@inforegulator.org.za or via https://inforegulator.org.za.

Our website and services are directed at businesses and professionals, not children. We do not knowingly collect personal information from children without the consent of a competent person.

We may update this Policy from time to time. The current version is always the one published on this page, with the effective date shown above.

Elythra (Pty) Ltd · Registration number 2026/670939/07 · South Africa. For any privacy matter, contact our Information Officer at hello@elythra.io.