Privacy Policy

1. Responsible party

Dennis Kriel, Pretoria, Gauteng, South Africa. Information Officer: Dennis Kriel, reachable at dennis@verdantech.co.za.

2. What we collect

• Email address when you sign in or purchase. It is your account identifier and where we send sign-in links and purchase confirmations.
• Purchase records: the order reference, amount, date and PayFast payment status. We never receive your card number; PayFast handles payment details under its own privacy policy.
• Technical logs such as IP address and browser type, kept for security and error diagnosis for up to 30 days.

Reading progress, display preferences and your reflection journal notes are stored in your own browser (local storage) and are not sent to us.

3. Why we use it

• To sign you in and unlock what you have bought (performance of a contract).
• To respond when you contact us.
• To keep the service secure and to prevent payment fraud.

We do not sell personal information. We send email updates (resources to use with your children, new AI tools, and updates to the book) only if you ticked the optional box on the sign-in form. That is consent under section 69 of POPIA and Article 6(1)(a) of the GDPR; we record when you gave it and the wording you agreed to. You can withdraw it at any time on your account page or via the unsubscribe link in any update, and sign-in and purchase emails are not affected.

4. Where it is stored

Account and purchase data is stored with Supabase, our database and authentication provider, and processed by PayFast (South Africa) or Stripe (card payments in US Dollars) for payments. The site itself is hosted on a virtual server in the United Kingdom. These providers act as operators under POPIA and may store data outside South Africa; each is bound by contractual safeguards.

5. Cookies

We use a strictly necessary session cookie to keep you signed in. We also use Google Analytics to understand which pages and tools are useful. Its cookies are set only after you choose “Allow analytics” in the cookie bar; if you decline, Google receives only anonymous, cookieless page counts. You can change your choice any time via “Cookie settings” in the footer. IP addresses are anonymised.

6. Retention

Account and purchase records are kept for as long as you hold access, and thereafter for the period required for tax and accounting records (currently five years). Technical logs are deleted after 30 days.

7. Your rights

You may ask what personal information we hold about you, ask us to correct it, or ask us to delete your account. Email dennis@verdantech.co.za from the address on the account and we will respond within 30 days. You may also lodge a complaint with the Information Regulator of South Africa.

8. Children

The site is for parents and caregivers. We do not knowingly collect personal information from children under 18. The Family AI Agreement tool runs entirely in your browser; the names you type are not sent to us.

9. Changes

If this policy changes materially we will note the date at the top of this page and, for significant changes, email account holders.