Privacy Policy

1. Who we are

This policy applies to Spout Technologies (Pty) Ltd (South Africa, registration 2019/351516/07) and Spout Technologies Limited (Zambia). References to “Spout,” “we,” or “us” refer to both entities. Our registered address is Johannesburg, South Africa. For privacy-related enquiries, contact privacy@spout.co.za.

2. Information we collect

We collect personal information only when it is necessary to deliver our services or respond to your enquiries. This includes:

• •Contact information — name, email address, phone number, organisation name, submitted via our website contact form or direct communication.
• •Service-related data — information necessary to deliver managed IT, software development, consulting, or SaaS services under a signed engagement.
• •Usage data — anonymised, aggregate website analytics (page views, referral source) collected via privacy-respecting analytics tools. We do not use invasive tracking or third-party advertising cookies.

3. How we use your information

We use personal information to respond to enquiries, deliver contracted services, communicate service-related updates, and improve our website and offerings. We do not sell, rent, or share your personal information with third parties for marketing purposes. Information is shared with third parties only where necessary to deliver services (e.g., cloud infrastructure providers) or where required by law.

4. Legal basis for processing

In South Africa, we process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA). In Zambia, we comply with the Data Protection Act, 2021. Our legal bases for processing include: consent (where you voluntarily submit information), contractual necessity (where processing is required to deliver services), and legitimate interest (where processing supports our business operations without overriding your rights).

5. Data retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact form submissions are retained for 24 months unless an active service engagement exists. Client service data is retained for the duration of the engagement plus any legally required retention period.

6. Your rights

You have the right to access, correct, or request deletion of your personal information. You may also object to processing or request restriction of processing in certain circumstances. To exercise any of these rights, contact privacy@spout.co.za. We will respond within 30 days.

7. Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS), access controls, regular security reviews, and secure cloud infrastructure provided by Google Cloud Platform and Firebase.

8. Cookies

Our website uses only essential cookies required for authentication and session management. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. No cookie consent banner is required because we do not collect data that requires consent under POPIA or GDPR.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via our website. The “last updated” date at the top of this page reflects the most recent revision.

10. Contact

For privacy-related enquiries, complaints, or requests to exercise your rights, contact us at privacy@spout.co.za or via our contact page.