1. Who we are
CyberStudios (company registration K2021624299) runs cyberstudios.co.za, our shop, hosting tools, and related services. Physical address on file for legal notices: [YOUR_STREET_ADDRESS], [CITY], [PROVINCE], South Africa (update this in your live site settings when confirmed).
POPIA information officer: The person responsible for privacy questions is reachable at [email protected] (or a named deputy—replace this sentence if you appoint a separate officer).
This policy is written in plain English. It follows South Africa’s Protection of Personal Information Act (POPIA). If you live in the EU or UK, parts of the GDPR may also apply; we describe similar rights below.
2. What personal information we collect
Depending on what you use, we may collect:
- Account details: name, email, username, phone if you give it.
- Security: password hashes, two-factor settings, login and device history where we log it to protect accounts.
- Billing: invoices, order history, payment references. Card payments are handled by our payment partners—we do not store full card numbers on our own servers.
- Delivery: postal address for physical goods (South Africa only).
- Support: ticket messages, uploads you attach, and email threads.
- Technical logs: IP address, browser type, rough location from IP, timestamps—mainly for security and fault finding.
- Marketing: only if you opt in (for example newsletter sign-up).
We do not set out to collect sensitive information (such as health data). If you send it to us by mistake, contact us and we will delete what we can unless the law requires us to keep it.
3. Why we use your information
We use it only where we have a fair reason. In POPIA terms that usually means: you agreed (for example ticking a marketing box); we need it to perform a contract with you; we have a legal duty; or we have a legitimate interest that is balanced against your privacy (such as stopping fraud or fixing outages).
4. How we store and protect it
Data is stored on servers and backups we control or on vetted cloud services. We use encryption in transit (HTTPS), access controls, and staff training suited to a small team. No system is perfect—if we learn of a breach that affects you, we will tell you when the law requires it and explain what we are doing about it.
5. Who we share with
We only share what is needed with suppliers who help us run the business. Examples (not every service applies to every customer): Yoco, PayPal, couriers such as Pudo or The Courier Guy, email or newsletter tools, ticketing, code hosting (GitHub), file storage (Google Drive, OneDrive), project tools (Trello), and website analytics (Google Analytics where enabled). Each processor must keep information confidential and use it only for the work we hire them to do.
6. Google and Meta
Because we publish apps and use common developer tools, some information may flow to Google (for example Play Console, Firebase or Google Analytics if you consent) and Meta (for example if you use a login or pixel we enable, or if you interact with our Meta developer surfaces). Those companies have their own privacy policies. We choose settings that minimise data where we can, but you should read their terms if you use their platforms heavily.
7. Cookies
We use cookies for logins, baskets, security, and—if you agree—analytics or marketing. Details are in our Cookie Policy. You can change your mind later using the cookie banner or your browser settings.
8. Your rights under POPIA (and similar GDPR rights)
You may ask what we hold about you, ask us to fix mistakes, object to certain uses, or ask us to delete information where the law allows. Email [email protected]. We may ask for proof of identity. We will respond within a reasonable time (POPIA allows up to 30 days in many cases).
If we send your information outside South Africa (for example to an EU or US cloud), we do so only where POPIA allows—for example with your consent, a contract in place, or another lawful ground.
9. If you are unhappy
Contact us first. You may also complain to the South African Information Regulator: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 · [email protected] · +27 (0)10 023 5207. EU/UK residents may contact their local data protection authority.
10. Contact
Privacy questions: [email protected].
This policy should be reviewed whenever material processing changes occur, and at least annually, for POPIA alignment.