Privacy Policy

1. Introduction

Boland Webworks ("BWW", "we", "our", "us") is committed to protecting your personal information in compliance with the Protection of Personal Information Act (POPIA). This Privacy Policy explains how we collect, process, store, share, and protect personal information when you use our website, SaaS features, and related services.

2. Personal Information We Collect

• Name, email address, account UID, and account profile fields.
• Uploaded files (including PDFs) and project/service request details.
• Tikwedren activity for signed-in users, including WPM, accuracy, race metadata, and moderation outcomes.
• Leaderboard identity data when ranked runs are submitted, such as display name/alias and score fields.
• Support, communication, and request history you voluntarily provide.
• Technical and usage data generated by platform operations, security controls, and analytics tooling.

3. Purpose of Processing

• To provide account services, uploads, project workflows, and support.
• To operate ranked Tikwedren features, leaderboards, and moderation controls.
• To improve reliability, security, and product quality through operational analytics.
• To communicate service updates, security notices, and support responses.
• To run marketing communications where lawful and with consent where required, with opt-out available.
• To meet legal, regulatory, audit, and dispute-handling requirements.

4. Lawful Bases for Processing (POPIA)

• Performance of a contract or pre-contract service delivery requested by you.
• Your consent, where consent is the appropriate lawful basis.
• Legitimate interests in running, securing, and improving our services.
• Compliance with legal obligations under applicable South African law.

5. Hosting, Infrastructure, and Service Providers

• BWW platform hosting is provided through Vercel.
• Authentication, database, and file storage features are provided through Firebase/Google Cloud.
• Domain registration and DNS management for client projects may be handled via Zoho, Truehost, Vercel, or another provider selected by the client.
• Business email hosting for client projects may be provided via Zoho Mail or another provider selected by the client.
• Some client projects may use additional platforms such as Shopify or AWS depending on scale and business requirements.
• For client website projects managed by BWW, deployment is typically on Vercel by default unless a different hosting provider is selected by the client.
• Service providers process data only as needed to provide their services, under contractual and security controls.

6. Data Sharing

• Internal access is limited to authorized personnel with service-related need.
• Trusted providers may process data for hosting, infrastructure, support, and analytics.
• Ranked Tikwedren leaderboard entries may be displayed publicly (for example alias/display name, WPM, and accuracy) when users submit ranked runs.
• Data may be disclosed where legally required or to protect legal rights and platform security.

7. Data Security

• Encrypted transport (TLS/SSL), access controls, and role-based restrictions are applied.
• Administrative and technical controls are used to reduce unauthorized access risk.
• Users may request deletion/export support for account-linked uploaded files.

8. Data Retention

• Data is retained for as long as needed to provide services and meet legal obligations.
• Account-linked data may be deleted on user request, subject to lawful exceptions.
• Operational logs and backups may remain for limited periods before deletion cycles complete.

9. Cookies, Local Storage, and Analytics

• We use browser storage (such as local storage) for features like guest Tikwedren progress and local preferences.
• Signed-in Tikwedren ranked history is stored in Firebase and linked to account UID.
• We use analytics tooling (including Vercel Analytics event tracking) to monitor usage and improve service performance.
• If additional marketing or advertising trackers are introduced, this policy will be updated.

10. Your Rights under POPIA

• Access: Request access to personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of information where lawful and applicable.
• Objection: Object to processing in circumstances provided by POPIA.
• Marketing Opt-Out: Withdraw from direct marketing communications at any time.

11. Cross-Border Processing

Because our technology providers may operate infrastructure in multiple regions, personal information may be processed outside South Africa. We take reasonable steps to ensure appropriate protection measures are in place in line with POPIA requirements.

12. Changes to this Policy

• We may update this Privacy Policy from time to time.
• Changes are effective when published with an updated "Last Updated" date.
• Material updates may also be communicated by email or platform notification.

13. Contact