Privacy Policy
Last updated: 25 Oct 2026
This policy explains what personal information we collect when you use our website or our services, why we collect it, who we share it with, and what rights you have. We keep it plain on purpose. It follows South Africa's Protection of Personal Information Act, 4 of 2013 (POPIA).
1. Who we are
| Responsible party | NelCapeTown (Pty) Ltd, trading as Solution Adventurists |
| Registration number | 2025/775057/07 |
| Address | 50 Fairview Crescent, Milnerton Ridge, Cape Town, South Africa |
| Website | https://nelcapetown.com |
| Information Officer | Cornelius Johannes Prinsloo |
| Contact | nel@nelcapetown.com |
We are a Cape Town-based practice that sets up WhatsApp Business accounts and builds automation and AI solutions for small businesses. We work remotely.
2. What we collect, and why
| When | What we collect | Why | Our legal basis |
|---|---|---|---|
| You contact us (form, email, WhatsApp) | Name, email address, phone number, business name, your message | To reply and to prepare a quote | Your request; our legitimate interest in answering enquiries |
| You buy a service | Business and contact details, invoicing details, payment confirmation from our payment provider | To deliver the service, invoice you and keep tax records | Performing our contract; legal obligation |
| We set up or build something for you | Your business profile, product names, prices and images, quick-reply wording, and temporary access to your WhatsApp Business account, and the business information you provide for AI responses | To do the work you asked for | Performing our contract |
| We connect your WhatsApp Business account to our platform through Meta's WhatsApp Business Platform (Cloud API) | Your WhatsApp Business Account ID, phone number ID, business profile, message templates, access tokens issued by Meta, and the messages, phone numbers, WhatsApp profile names and delivery status of conversations sent through our platform | To send and receive messages and manage templates on your behalf | Performing our contract; for your customers' data we act as your operator (section 4) |
| You join a waiting list or newsletter | Your email address | To tell you about the product or news you asked about | Your consent (you can withdraw it at any time) |
| You visit our website | Technical data such as IP address, browser type, pages requested and times, and the security cookies described in section 12 | To keep the site working and secure | Our legitimate interest in running a safe website |
We do not collect more than we need for these purposes. We do not ask for or store your WhatsApp password, your bank login or the verification codes sent to your phone. Please never send them to us.
If you start filling in our WhatsApp intro-call booking form and don't finish, your browser remembers what you typed for up to 48 hours so you don't have to start over — this stays on your own device and is never sent to us unless you submit the form.
3. Payment information
Payments are processed by PayFast (Network International (Pty) Ltd). Your card or bank details go to PayFast, not to us, and we do not see or store them. We receive confirmation that a payment was made, the amount and your reference.
4. Your customers' information
When we set up or build something for your business, you stay the responsible party for the personal information of your customers. We act as your operator under POPIA: we process it only on your instructions, keep it confidential and secure, and do not use it for anything else. Larger or ongoing projects will have a written operator agreement as part of the quotation.
5. Who we share information with
We share information only with the service providers we need to run the business, and only for the purposes above:
- Microsoft: email and productivity tools.
- DigitalOcean: hosting and DNS for our website.
- PayFast: payment processing.
- Resend: delivery of the emails we send you (enquiry replies, intro-call confirmations, invoices).
- Cloudflare: bot-detection check (Turnstile) on our WhatsApp intro-call booking form, before a submission is accepted.
- Telegram: an internal alert when you book a free intro call — your business name, contact name, chosen meeting platform and readiness answer only; never your phone number or email address.
- Meta Platforms (WhatsApp, Facebook, Instagram): when we work on or communicate through these platforms, Meta processes the data under its own terms and privacy policy. This includes the business information used for WhatsApp's AI responses, which Meta processes to generate answers.
- Google: search and domain tools.
- Automation and AI tools we use to build your solution, including OpenAI, Anthropic and Google Gemini: only as needed for the work, and as agreed with you.
- Our professional advisers (accountant, attorney), when needed.
- Authorities, only where the law requires it, and as set out in our Public Authority Data Request Policy.
We never sell personal information. Data we receive from Meta is used only to provide the service you asked for. We do not sell it, use it for advertising, or combine it to build profiles.
6. Sending information outside South Africa
Some of our providers store or process information outside South Africa, for example Microsoft, DigitalOcean (our servers are in London, UK) and Meta. We only use providers that are bound to protect personal information to standards comparable to POPIA, as section 72 of POPIA requires. We also store information on our own server in South Africa.
7. How long we keep it
| Information | How long |
|---|---|
| Enquiries that do not become a sale | 24 months after our last contact, then deleted |
| WhatsApp intro-call leads that do not become a sale | 12 months after the last status change, then deleted |
| Client records and invoices | Five years after the transaction, as South African tax law requires |
| Your setup materials (images, text, the business information we record in your setup session, access details) | Access removed at handover; the materials and the record of your setup session are deleted automatically 30 days after the seven-day support period that follows handover ends, unless you ask us to keep them or to delete them sooner |
| Newsletter and waiting-list emails | Until you unsubscribe |
| Website logs | 90 days |
| Access tokens issued by Meta | Revoked when you disconnect your account or the service ends, then deleted within 30 days |
| WhatsApp messages and delivery data processed through our platform | As agreed with you in your quotation; deleted within 30 days after the service ends |
8. How we protect it
Our website runs only over HTTPS and uses modern security settings. Email is protected with SPF, DKIM and DMARC. We limit access to the information to the people who need it, use strong sign-in practices, and remove temporary access to client accounts at handover. No system is perfectly secure. If a breach affects your personal information, we will tell you and the Information Regulator as the law requires.
9. Your rights
Under POPIA you may:
- ask us what personal information we hold about you and why;
- ask us to correct or delete information that is inaccurate, out of date or no longer needed;
- object to our processing of your information;
- object to a decision based solely on automated processing (including AI) that significantly affects you, and ask for a person to review it;
- withdraw your consent where we rely on it (this does not affect what we did before you withdrew);
- complain to the Information Regulator.
To exercise a right, email nel@nelcapetown.com. We will respond within a reasonable time, usually within 30 days. We may need to confirm your identity first.
Information Regulator (South Africa): https://inforegulator.org.za, complaints: complaints.IR@justice.gov.za
10. Deleting your data
To ask us to delete your personal information, including any data we received from Meta through the WhatsApp Business Platform, email nel@nelcapetown.com with the subject "Data deletion request" and the phone number or business account concerned.
We will confirm receipt, delete the data within 30 days, and confirm when it is done. If you disconnect your WhatsApp Business account from our platform, we revoke our access tokens and delete the related Platform Data within 30 days, except records we must keep by law (such as invoices).
11. Direct marketing
We send marketing email only to people who have asked for it (for example, by joining a waiting list). Every message includes a way to unsubscribe. We do not send unsolicited marketing.
12. Cookies
Our website uses cookies that are necessary for it to work and to keep your session and forms secure, such as an anti-forgery cookie. Those cookies are essential and do not track you across other sites.
13. Children
Our services are for businesses and adults. We do not knowingly collect personal information from anyone under 18.
14. Changes to this policy
We may update this policy. The date at the top shows when it last changed, and we will highlight material changes on our website.
15. Contact us
Questions about this policy or your information: nel@nelcapetown.com.