PRIVACY

Your information, handled with care.

This policy explains how Developernauts handles personal information when you visit this website or send us an enquiry.

Effective 31 August 2026

01

Who we are

Developernauts (Pty) Ltd is a South African web, mobile and product development studio operating as Developernauts. In this policy, “we”, “us” and “Developernauts” refer to Developernauts (Pty) Ltd, the company responsible for this website and the enquiries received through it.

02

Scope of this policy

This policy applies to personal information processed when you browse this website, use its enquiry form or contact us through the email address published here. It does not govern a client project where a separate agreement or privacy notice applies, or the privacy practices of websites linked from this site.

03

Information we collect

We collect information that you choose to provide in an enquiry, together with limited technical information needed to operate the website, protect the form and respond reliably. This website does not contain analytics tools, advertising pixels or behavioural tracking code.

04

Information submitted through the enquiry form

The enquiry form asks for your name, email address, project type and a message describing your idea. Please avoid including sensitive or unnecessary personal information in the message. Your email address is used as the reply-to address when the enquiry is delivered to us.

05

Technical information for security and spam prevention

The website processes your IP address to apply submission rate limits. Necessary session records may also include an IP address and browser user-agent. The form uses a protected form-start value, submission timing and a one-time nonce to distinguish genuine submissions, reduce automated spam and prevent duplicate delivery. A hidden spam field may be checked, but rejected spam content is not intentionally emailed, saved as an enquiry or written to application logs.

Standard application or hosting logs may contain technical request details such as an IP address, time, requested URL or error information. Their exact operation depends on the production hosting and logging configuration.

06

Cookies and local browser storage

The website uses Laravel’s strictly necessary session and cross-site request forgery protection mechanisms. These may set a session cookie and a CSRF token cookie so the form can be submitted securely, validation messages can be returned and a success message can be displayed.

No analytics or advertising cookies are configured. The website code does not use localStorage or sessionStorage. Because only necessary application cookies are currently used, the site does not display a marketing cookie banner.

07

Why we process information

We process personal information to receive and answer enquiries, understand a possible project, take steps requested before entering into a working relationship, maintain the security and reliability of the website, prevent abuse, comply with applicable law and protect legitimate rights or interests.

08

How enquiries are delivered and stored

A genuine enquiry is sent to Developernauts by email. The application does not insert contact enquiries into an enquiry database table.

Email associated with the website is sent and received using Axxess. This means that Axxess may process and retain information contained in an enquiry as part of providing email delivery and mailbox services.

This does not mean that no other copy exists. The receiving mailbox, outgoing mail systems, backups or related infrastructure may retain email or technical records according to their configuration and retention practices.

09

Lawful and responsible processing

We aim to process personal information in a manner that is adequate, relevant and not excessive for the stated purpose. Depending on the circumstances, processing may be necessary to respond to your request, pursue a legitimate business interest, comply with a legal duty or act with your consent where consent is required. We will not use an enquiry for unrelated direct marketing without an appropriate basis.

10

Service providers and disclosure

We use service providers where necessary to operate this website and deliver enquiries.

The production website is hosted using Amazon Web Services (AWS), with the application infrastructure located in the AWS Africa (Cape Town) Region in South Africa. AWS may process technical information required to provide the hosting infrastructure, including information associated with server requests, application infrastructure, sessions, caches, backups and logs, depending on the services and configuration we use.

Axxess provides the email services used to send and receive website enquiries and may therefore process information contained in those emails as necessary to provide email delivery and mailbox services.

We do not sell personal information.

Personal information may also be disclosed where reasonably necessary to comply with applicable law, respond to a lawful request, protect our rights or security, obtain professional advice, or in connection with a legitimate business transaction, subject to appropriate safeguards.

11

Processing locations

The production website is hosted primarily in South Africa using the Amazon Web Services Africa (Cape Town) Region.

Where AWS services are configured to store application data in that Region, the website's hosted application data is intended to remain within the selected South African AWS Region unless another location or service is deliberately configured or processing elsewhere is required to provide a requested service or comply with applicable law.

Website enquiries are sent and received using email services provided by Axxess. We do not make a specific claim in this policy about the geographic location of Axxess email storage or processing unless that location has been verified.

Some information may nevertheless be processed outside South Africa where a service provider or supporting infrastructure uses systems in another country.

Where personal information is transferred or processed outside South Africa, we will take reasonable steps to ensure that the transfer is handled in accordance with POPIA and that appropriate safeguards are used where required.

12

Information retention

We retain personal information only for as long as reasonably needed to respond, manage a potential or active business relationship, meet legal or operational requirements, resolve disputes and protect rights. Retention may differ between email, security records, sessions, caches and infrastructure logs. Short-lived anti-duplicate and rate-limit records expire automatically; no fixed mailbox or hosting retention period is stated because those settings have not been verified.

13

Security safeguards

Reasonable safeguards in the website include server-side validation, an approved project-type list, CSRF protection, protected timing data, spam checks, rate limiting, duplicate-delivery controls and delivery to a configured recipient. No internet service can guarantee complete security, and safeguards are reviewed in light of the information processed and reasonably foreseeable risks.

14

Your rights under POPIA

Subject to POPIA and any applicable limitations, you may ask whether we hold personal information about you, request access to it, ask that inaccurate information be corrected, request deletion or destruction where appropriate, or object to certain processing. You may also withdraw consent where processing depends on consent. We may need to verify your identity and may retain information where the law permits or requires it.

15

Contact Developernauts about privacy

To ask a privacy question or exercise an applicable right, email connect@developernauts.com. Please describe your request clearly and do not send identity documents unless we ask for information needed to verify the request safely.

16

Right to complain

If you believe your personal information has been handled contrary to POPIA, you may complain to the Information Regulator of South Africa. Visit the Information Regulator’s complaints page for current complaint channels and guidance.

17

Children’s information

This website and its enquiry form are intended for people seeking professional development services and are not directed at children. We do not knowingly ask children to submit personal information. A parent or guardian who believes a child has submitted information may contact us so the request can be considered appropriately.

18

Changes to this policy

We may update this policy when the website, our practices or applicable requirements change. The revised policy will be published on this page with an updated effective date. Where a change materially affects how existing information is handled, we will take reasonable steps to communicate it where appropriate.

19

Effective date

This Privacy Policy is effective from 31 August 2026.