Privacy notice

This notice explains what personal information we collect through the Kepto website, why we collect it, and what you can require us to do about it. It is written to meet our obligations under the Protection of Personal Information Act, 2013 (POPIA).

Who is responsible for your information

The responsible party is Pivot Software (Pty) Ltd, a company registered in South Africa, trading as Kepto.

Our Information Officer can be reached atcustomers@kepto.co.za, or on061 283 0170. Address any privacy question, complaint or request to that address and it will reach the right person.

What we collect, and why

This is the marketing website. It is deliberately narrow in what it gathers — there is no account to create here and no tracking or advertising technology on these pages.

Information you give us

When you complete the contact form, or email or call us, we receive:

• Your name
• Your email address
• Your business name, if you provide one
• Your phone or WhatsApp number, if you provide one
• Whatever you write in your message
• Which page you submitted the form from
• Whether you ticked the box consenting to marketing email

We use this for one purpose: to reply to you and, if it goes that way, to discuss whether Keptosuits your business. The lawful basis is that you asked us to respond. We do not need your consent to answer a question you sent us — but we do need it to market to you, which is why that is a separate, unticked box.

Information collected automatically

Our hosting provider records standard server logs, including IP address, browser type and the pages requested. These exist to keep the site running and secure, including limiting how often the contact form can be submitted from one address. We do not use them to build a profile of you. There is no analytics script, no advertising pixel and no third-party chat widget on this site.

Cookies

This website does not set cookies. Nothing here needs one, so we do not use any — which is also why there is no cookie banner interrupting you.

Who we share it with

We do not sell your personal information and we never will. We share it only with the service providers needed to operate this site, and only to the extent they need it:

• Resend — delivers the notification email containing your enquiry.
• Railway — hosts this website and the server that receives the form.

Both process information outside South Africa. Where personal information is transferred across a border, POPIA requires that the recipient is subject to comparable protection; we rely on these providers' contractual data-processing commitments for that.

We may also disclose information where the law requires it, or to establish or defend a legal claim.

How long we keep it

• Enquiries that do not become customers — kept for 24 months from your last contact with us, then deleted. That window exists because sales conversations in this market frequently restart a year later.
• Enquiries that become customers — retained under our customer agreement for as long as we provide the service, and afterwards only as long as tax and company law requires.
• Marketing consent records — kept until you withdraw consent, and then a record of the withdrawal itself, so we can prove we honoured it.
• Server logs — retained on a short rolling basis by our host.

Your rights under POPIA

You are entitled to:

• Ask what personal information we hold about you, and be given a copy
• Have information that is inaccurate, irrelevant, out of date or misleading corrected
• Ask us to delete or destroy information we no longer have grounds to keep
• Object to our processing, on reasonable grounds
• Withdraw marketing consent at any time, without it affecting anything else
• Complain to the Information Regulator

To exercise any of these, email customers@kepto.co.za. We will respond within a reasonable period and will not charge you for a request to correct or delete your information.

Complaining to the regulator

If we have not resolved something to your satisfaction, you may complain to the Information Regulator of South Africa:inforegulator.org.za. We would ask that you raise it with us first, because we would rather fix it.

How we protect it

Access to enquiry information is limited to the people at Pivot Software (Pty) Ltd who need it. Data is transmitted over encrypted connections and held with reputable providers. No system is perfectly secure, and we will not pretend otherwise — but if a breach ever affects your personal information, POPIA requires us to notify you and the Regulator, and we will.

Children

This site is aimed at businesses and not at children. We do not knowingly collect information about anyone under 18.

Changes

If this notice changes materially, we will update the date at the top and, where the change affects how we use information you have already given us, tell you directly.

A note about the Kepto product

This notice covers the website. If you become a customer, Kepto processes your customers' information on your instruction — there you are the responsible party and we are the operator. That relationship is governed by your customer agreement, not this page.