Privacy Policy

This Privacy Policy describes how VUNA GROUP (Pty) Ltd ("we," "us," or "our") collects, uses, and discloses your personal information when you interact with Chatty — our WhatsApp-based booking, payments and retention platform — including through the Chatty website and contact form. Your privacy is important to us and we are committed to protecting your personal information in accordance with South Africa's Protection of Personal Information Act, 4 of 2013 (POPIA).

By submitting the contact form or using the Service you agree to the collection and use of information described in this policy.

1. Information We Collect

We collect personal information that you voluntarily provide and certain information generated automatically when you visit our website.

1a. Information You Provide via the Contact Form

When you submit our contact form we collect the following fields, which you provide voluntarily:

• First name
• Last name
• Business name (optional)
• Email address
• Phone number (WhatsApp number, optional)
• Message — your enquiry or any other information you choose to share

1b. Usage Data

Our web server records standard request information — such as your browser type, referring URL and the pages you visit. Your IP address is processed transiently for security, rate-limiting and spam-prevention on the contact form, and is not used to build a profile of you.

1c. Cookies & Tracking Technologies

The Chatty website does not set advertising or third-party tracking cookies, and we do not run third-party analytics on it. If we introduce any non-essential cookies in future, we will update this policy and ask for your consent first.

2. How We Use Your Information

We use the personal information we collect to:

• Respond to your enquiry and arrange a product demonstration;
• Set you up on the Chatty platform and provide ongoing support;
• Send you transactional communications related to your account or booking;
• Improve and maintain our website and service;
• Comply with our legal obligations under POPIA and other applicable law.

We will only send marketing communications with your prior consent. You may opt out at any time by emailing [email protected].

3. Information Sharing & Disclosure

We do not sell your personal information. We share your information only with third-party service providers who help us operate our service, including:

• Email delivery — our email (SMTP) provider, used to send contact-form notifications to our team and a confirmation to you;
• Team notifications — Telegram, used to alert our team to new enquiries;
• Bot protection — Cloudflare Turnstile, used to verify that contact-form submissions are made by a human;
• Messaging platform — WhatsApp / Meta Business Platform for delivering the booking and payments service.

Each provider is bound by appropriate data-processing agreements. We may also disclose personal information if required by law, court order, or a lawful request from a public authority.

4. Data Retention

We retain contact-form enquiries for as long as the business relationship is active and for up to 90 days after the last interaction, unless a longer period is required by law. You may request earlier deletion at any time (see Section 5).

5. Your POPIA Rights

Under POPIA you have the following rights regarding your personal information:

• Right to access — request a copy of the personal information we hold about you.
• Right to correction — request that we correct inaccurate or incomplete information.
• Right to deletion — request that we delete your personal information, subject to legal retention requirements.
• Right to object — object to the processing of your personal information for direct-marketing purposes.
• Right to complain — lodge a complaint with the Information Regulator of South Africa at www.justice.gov.za/inforeg.

To exercise any of these rights please email us at [email protected]. We will respond within 30 days.

6. Security

We implement appropriate technical and organisational measures — including encrypted connections (HTTPS), access controls, and secure server infrastructure — to protect your personal information from unauthorised access, loss, or disclosure. No internet transmission is 100% secure; we will notify you promptly in the event of a data breach that poses a risk to your rights.

7. Children's Privacy

The Chatty service is intended for businesses and is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has submitted information through our site, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email and update the effective date at the top of this page. We encourage you to review this policy periodically.

9. Contact Us

Disclaimer: This Privacy Policy is provided for informational purposes and should be reviewed by a qualified legal professional to ensure full compliance with POPIA and all other applicable laws.