Information We Collect and How We Use It

Infini Colon (Pty) Ltd is the responsible party for personal information collected through our website and general business enquiries. For client projects, we may act as an operator processing personal information on your instructions under a separate agreement — the relevant role will be set out in your proposal, statement of work, or data processing terms.

Depending on how you interact with us, we may collect:

• Identity and contact information: name, email address, phone number, company name, job title, and billing contact details.
• Account and authentication information: login credentials and profile details where you are given access to a client portal, demo environment, or platform product such as Signal, Forge, Flux, Pulse, or Vero.
• Usage and technical information: IP address, browser type, device information, pages visited, referral source, and interaction data on our website or hosted applications.
• Communications: messages you send via contact forms, email, WhatsApp, or support channels.
• Project and service-related information: business data, workflow details, operational records, and other information you provide or that is generated when we design, build, or support business systems, software, AI workflows, data and reporting layers, or finance operations tools for you.
• Payment information: invoicing details and payment records. Card or banking details are typically processed by our payment service providers rather than stored directly by us.

We use personal information to:

• Provide, operate, maintain, and improve our website, services, and platform products.
• Respond to enquiries, assessments, proposals, and support requests.
• Deliver business systems and related professional services under contract.
• Manage billing, invoicing, and payment follow-up.
• Send service-related updates, project communications, and — where permitted — marketing about Infini Colon offerings.
• Analyse website and product usage to improve performance, security, and user experience.
• Detect, prevent, and address fraud, abuse, or security incidents.
• Comply with legal obligations and enforce our agreements.

Where required by POPIA, we rely on an appropriate legal basis such as consent, contract performance, a legitimate interest that is not overridden by your rights, or a legal obligation.

We may share personal information with:

• Service providers who assist us — for example hosting, email delivery, analytics, customer support, and payment processing — under confidentiality and data protection obligations.
• Professional advisers where reasonably necessary.
• Affiliates or successors in connection with a merger, acquisition, or asset sale.
• Regulators, courts, or law enforcement when required by law or to protect our rights.
• Other parties with your consent or as directed by you.

Some providers may process information outside South Africa. Where we transfer personal information cross-border, we take steps reasonably required under POPIA, which may include appropriate contractual safeguards.

We retain personal information only for as long as necessary for the purposes described in this policy, to meet contractual requirements, or to comply with legal, tax, and accounting obligations. Retention periods vary depending on the type of information and our relationship with you. When information is no longer required, we delete or anonymise it in a secure manner, subject to backup and archival cycles.

Our website and services are directed at businesses and professionals. We do not knowingly collect personal information from children under 18 without appropriate consent. If you believe we have collected such information, please contact us so we can take appropriate steps.