Privacy Policy

1. Responsible party

Growth Engine (Pty) Ltd (registration number 2026/674181/07), trading as Growth Engine, of 16 Carissa Street, Durbanville, 7550, South Africa, is the responsible party for personal information processed through this website and through the Growth Engine platform at app.mygrowthengine.co.za. This is the single privacy policy for both.

Privacy requests can be sent to support@mygrowthengine.co.za or made through the Contact page.

2. What we collect

Registration information (now)

When you register your interest in the Service, we collect your full name, business name, email address and mobile/WhatsApp number, together with your consent to be contacted about activating your account.

Contact enquiries (now)

When you use the contact form, we collect your name, email address, optional business name and your message.

Business account information

Subscribing businesses provide account details such as business name, category, contact details and settings when they sign up on the platform.

Your customers’ information

Subscribing businesses upload or capture information about their own customers — typically names, mobile numbers, notes, opt-out preferences, feedback, ratings, rewards and WhatsApp interaction history. For that information, the subscribing business is the responsible party and we process it on the business’s behalf to operate the Service.

Payment information

Subscription payments are handled by PayFast, a regulated South African payment provider. Your card details are captured by PayFast when you sign up for the free trial on the platform, and are processed under PayFast's own terms and privacy policy. We do not collect or store card numbers or banking details, on this website or on the platform. We receive only payment metadata (such as whether a payment succeeded) needed to manage subscriptions.

3. Why we process personal information

• To respond to enquiries and to contact registrants about activating the Service — based on your consent, which you may withdraw at any time.
• To operate the Service for subscribing businesses — based on the contract with the business.
• To send service messages to a business’s customers on the business’s instruction — processed on behalf of that business.
• To meet legal obligations and to protect the Service from abuse — based on legitimate interest and legal requirement.
• To understand how this website is used so we can improve it, using anonymous, cookie-free analytics that cannot identify you — based on legitimate interest.
• To measure how well our advertising works, using the Meta Pixel described in section 6 — based on legitimate interest.

We do not sell personal information.

4. Service providers we actually use

• Netlify hosts this website and receives form submissions (registration and contact). Netlify processes data on infrastructure that may be located outside South Africa; submissions are stored in our Netlify account.
• PostHog provides the anonymous usage analytics described in section 6. We use PostHog Cloud EU, so analytics data is processed on servers in the European Union.
• PayFast processes subscription payments and card details for the platform, under its own terms and privacy policy.
• Meta (Facebook and Instagram) provides the advertising measurement described in section 6; data collected by the Meta Pixel is processed by Meta under its own privacy policy.
• WhatsApp (Meta) carries the Service’s messages; WhatsApp processes message data under its own terms.

Because some of these providers operate internationally, personal information may be processed outside South Africa. We use providers that offer contractual safeguards consistent with POPIA’s requirements for cross-border transfers.

5. Retention and security

• Registration and enquiry information is kept for as long as needed to follow up and launch the Service, and is deleted on request.
• This website is served over HTTPS. Form submissions are transmitted encrypted in transit and stored in access-controlled hosting accounts.
• We limit access to personal information to the people who need it to operate the Service.

We do not claim any formal security certifications.

6. Cookies, analytics and advertising measurement

Our analytics does not use cookies. This website does use one advertising measurement tool, the Meta Pixel, which sets cookies; it is described below.

We use PostHog, a privacy-focused analytics service, to see how the website is used (for example, which pages are visited, roughly where visitors come from, and actions such as selecting a button or submitting a form) so we can improve it. Analytics events never include what you type into forms; only the fact that a form was successfully submitted is recorded. It is configured in cookie-free mode: it stores nothing on your device (no cookies and no local storage), events are anonymous, we do not use session recording, and our analytics is never used to identify individual visitors or to track you across other websites.

To count visits without cookies, PostHog groups the pages viewed in one visit using a short-lived anonymous identifier calculated on its servers from your network address and browser type. That identifier is never stored on your device, cannot be used to identify you, and expires automatically within 24 hours.

We also use the Meta Pixel to measure how well our advertising on Facebook and Instagram works. The Pixel sets cookies in your browser (including one named _fbp, and _fbc when you arrive from a Meta ad) and shares your activity on this website, together with browser information, with Meta. Meta may combine this with your Meta account under its own privacy policy. We use it only to measure and improve our advertising; we do not use it to identify you ourselves. You can limit this in your browser's cookie settings, through your Meta ad preferences, or by switching on the Global Privacy Control signal in your browser, which we honour by not loading the Pixel at all.

If you arrive from one of our adverts, we keep the advert's campaign tags (UTM parameters and the Meta click id) in your browser's session storage for the duration of your visit and pass them to the platform if you sign up, so we know which advert brought you. These tags describe the advert, not you.

On the platform (app.mygrowthengine.co.za)

The platform, where subscribers sign in, uses the same two tools with account context. PostHog analytics on the platform is linked to your business account (unlike the anonymous website analytics) so we can understand and improve how the product is used. The Meta Pixel also runs on the platform, and when you create an account, start a trial or make your first payment, we send Meta a corresponding measurement event through Meta's Conversions API. Those events include a one-way hashed version of your email address, your IP address and browser information, and Meta's cookie identifiers, and are used only to measure our advertising. If you arrived from one of our adverts, the advert's campaign tags are stored with your business account (for up to 30 days from your first visit) so we know which advert brought you.

Neither the platform's analytics nor its advertising events ever include your customers' personal information.

The interactive demo stores its sample data in your own browser’s local storage; that data never leaves your device and you can clear it from the demo’s settings at any time.

The display typeface on this website is served from our own domain, so viewing the site sends no requests to third-party font servers.

7. Your rights

Under POPIA you may:

• ask what personal information we hold about you;
• ask us to correct or delete it, including removing your registration entirely;
• withdraw consent to being contacted; and
• object to processing based on legitimate interest.

To exercise any of these rights, reach us via the Contact page. If you are not satisfied with our response, you may lodge a complaint with the Information Regulator (South Africa): inforegulator.org.za.