Privacy Policy

1. Introduction

Nicolabs Digital (Pty) Ltd ("we", "us", "our") is committed to protecting the privacy of our clients and users. This policy outlines how we process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).

2. Critical Definition: Operator vs. Responsible Party

To ensure clarity regarding our software products (specifically "AppliFlow"), we distinguish between two distinct roles:

• Nicolabs as "Responsible Party": When you visit this website (nicolabs.co.za), inquire about our services, or contract us for development, we act as the Responsible Party for your business contact information.
• Nicolabs as "Operator": When a School or Institution uses AppliFlow to manage learner applications, the School is the Responsible Party. Nicolabs acts strictly as the Operator. We process learner data solely on behalf of the School and do not claim ownership of that data.

3. Data Sovereignty & Storage

We prioritize local data residency to ensure compliance with South African cross-border transfer regulations.

• Application Data: Stored within the AWS Africa (Cape Town) region (`af-south-1`).
• Static Assets: Delivered via Vercel's Global Edge Network, with caching nodes in Johannesburg and Cape Town.
• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256).

4. Information We Collect

We may collect the following categories of information:

• Business Contact Details: Name, Email, Phone Number, and Company Registration Number (for invoicing).
• Technical Usage Data: IP addresses, browser types, and device telemetry to ensure site security and performance.
• Communication Records: Correspondence via Email or WhatsApp Business.

5. Your Rights

Under POPIA, you have the right to:

• Request access to the personal information we hold about you.
• Request correction or deletion of your personal information.
• Object to the processing of your personal information.
• Lodge a complaint with the Information Regulator.