Privacy Policy

Who we are

Mmaps Tech is a South African technology business providing website design, eCommerce, custom software, mobile applications, automation and related digital services. This notice applies to mmapstech.co.za and the Mmaps Tech Referral Partner Programme.

Personal information we collect

Depending on how you interact with us, we may process your name, business name, email address, telephone or WhatsApp number, project requirements, enquiry content, referral code, account and verification information, referral and commission records, withdrawal records, marketing preferences, and ordinary technical/security information such as IP-derived signals, browser/device information, timestamps, pages viewed, referring pages and campaign parameters.

Referral Partners also have account records such as verification status, programme status and security/audit events. We do not need or ask for banking PINs, OTPs, card CVVs or online-banking passwords.

Information received through referrals

A Referral Partner may introduce a prospective client and provide that person's name, business and contact details. In that situation, the information may come from the referrer rather than directly from the prospective client. Partners are required to confirm that they are permitted to share the information with Mmaps Tech for the referral. We use referred-client information to assess and respond to the introduction, communicate about relevant Mmaps Tech services, administer attribution and prevent duplicate or fraudulent referral claims.

Why we process information

We process personal information where reasonably necessary to respond to enquiries, prepare quotations, perform agreements and provide services; create and secure Referral Partner accounts; attribute and administer referrals; calculate and process approved commissions and withdrawals; maintain business and financial records; prevent fraud and abuse; secure our systems; measure website and campaign performance; comply with legal obligations; and pursue legitimate business purposes where permitted by law.

Growth Brief, advertising and direct marketing

Marketing consent is kept separate from necessary account, security, referral and service communications. Growth Brief subscribers may unsubscribe at any time. Where consent is required for electronic direct marketing, Mmaps Tech will seek the required permission and provide a way to stop future marketing. Transactional messages—such as account verification, password resets, referral status, payout-security alerts or communications needed for an active service relationship—are not treated as optional promotional subscriptions.

We may use lawful analytics and campaign measurement to understand traffic from channels such as search advertising, LinkedIn and Facebook. Non-essential cookies or similar technologies will be handled in accordance with applicable consent requirements when deployed.

Referral payout information

Referral Partners are asked for payout details only when needed to receive eligible commission. Payout information may include account-holder name, bank, account number, account type and branch code. The current referral system encrypts the full account number at rest using a server-side encryption key and normally displays only masked account information. Authorised administrators may reveal payout details when reasonably necessary to process or investigate a payment, and sensitive access may be audited. We do not intentionally place full bank-account numbers in ordinary audit records or emails.

Security, fraud prevention and audit records

We use technical and organisational safeguards designed to reduce unauthorised access, alteration, loss and abuse. These include authentication and account controls, rate limiting, server-side authorisation, anti-fraud checks, encrypted payout storage, restricted administrative access and security/financial audit records. Fraud signals may be used to identify possible self-referrals, duplicate claims, account abuse or other activity requiring review. No internet-connected system can guarantee absolute security.

When information may be shared

We do not sell personal information. Information may be provided to service providers that support hosting, email delivery, analytics, payment or business systems where reasonably necessary, or disclosed where required or permitted by law. Service providers may process information subject to their own obligations and applicable safeguards.

Retention

We retain information only for as long as reasonably necessary for the purpose collected, account and referral administration, security, financial recordkeeping, dispute resolution and applicable legal requirements. Different records may therefore have different retention periods. When information is no longer reasonably required, it should be deleted, destroyed or de-identified where appropriate and lawful.

Your POPIA rights

Subject to the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable law, you may request confirmation of whether we hold personal information about you, request access or correction, object to certain processing, withdraw consent where processing depends on consent, and request deletion where legally applicable. These rights are not absolute and some information may need to be retained for lawful purposes. We may verify your identity before acting on a request.

If personal information is materially compromised, Mmaps Tech will handle notification and response obligations in accordance with applicable law.

Contact and complaints

Privacy requests can be sent to admin@mmapstech.co.za. You may also lodge a complaint with South Africa's Information Regulator where applicable.