Privacy policy

Effective 1 October 2026

This policy explains how NextGen Digital, a trading name of NextGen Digital ("we", "us"), collects and uses personal information, in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who is responsible for your information

We are the responsible party. Our Information Officer is the Information Officer, whose name is still to be confirmed, contactable at privacy@nextgendigital.co.za or at Cedar Lakes Estate, Fourways, Johannesburg.

2. What we collect

• Contact details you give us: name, business name, email address, phone number and WhatsApp number.
• Project information you send us during onboarding, such as your services, prices, logo and website content.
• Payment information: Paystack processes your card or EFT payment. We receive confirmation of payment, the amount, your name and email. We never receive or store your full card details.
• Website usage information: if you accept analytics cookies, Google Analytics collects information such as pages visited, device type, approximate location and how you arrived at our site.

3. Why we use it

• To reply to your enquiries and send you the free scorecard you asked for.
• To deliver the services you bought, including onboarding, building and supporting your website.
• To process payments, issue receipts and keep accounting records.
• To improve our website, only if you have accepted analytics cookies.
• To meet our legal obligations, including tax and accounting law.

We process your information because you asked us to (for enquiries), to perform our contract with you (for purchases), to comply with the law (for records), or with your consent (for analytics). We do not sell your personal information, and we do not send you marketing unless you have opted in. You can opt out of any marketing at any time.

4. Who we share it with

We share only what each service provider needs to do its job:

• Paystack, to process payments.
• Our website and email hosting providers.
• Google, for analytics if you accept analytics cookies.
• The AI service provider that runs the website assistants we build, only for clients on the Care plan.
• Our professional advisers and authorities where the law requires it.

5. Information sent outside South Africa

Some of these providers store information on servers outside South Africa. We only use providers that are bound by laws or agreements that give a level of protection substantially similar to POPIA, as section 72 of POPIA requires.

6. How long we keep it

Enquiries that don't become clients: up to 12 months. Client and payment records: 5 years after our last transaction, as tax law requires. Analytics data: 14 months. After that we delete or anonymise it.

7. How we protect it

Our site uses HTTPS. Access to client information is limited to people who need it and protected by strong passwords and two-factor authentication. If we become aware of a security compromise affecting your information, we will notify you and the Information Regulator as POPIA requires.

8. Your rights

You may ask us to confirm what personal information we hold about you, to correct or delete it, or to object to how we use it. You may withdraw consent at any time, for example by rejecting analytics under Cookie settings. Email privacy@nextgendigital.co.za and we will respond within 30 days. A copy of our PAIA manual is available on request.

If you're unhappy with how we've handled your information, please tell us first so we can fix it. You also have the right to complain to the Information Regulator: www.inforegulator.org.za.

9. Changes

We will post any changes on this page with a new effective date.