Privacy Policy

Last updated: 13 October 2026

This policy explains what personal data Vexalabs ("we", "us") collects on www.vexalabs.com, why, and what your rights are. We are based in Johannesburg, South Africa. We build our software to comply with the Protection of Personal Information Act (POPIA) and the General Data Protection Regulation (GDPR), and we apply the same rules to this website.

What we collect

  • Contact form. Your name, email address, the project type you choose and your message. You give us this data when you send the form.
  • Analytics. If you click "Accept" in the cookie banner, Google Analytics sets cookies and collects how you use the site (pages viewed, device and browser type, approximate location from your IP address). If you click "Decline", or do nothing, no analytics cookies are set.
  • Technical data. Our hosting provider, Cloudflare, processes your IP address and request details to deliver the site and protect it from abuse.

Why we use it

  • To answer your inquiry and talk to you about your project. Legal basis: our legitimate interest in responding to you, and the steps you ask us to take before a contract.
  • To understand how the site is used and improve it. Legal basis: your consent, which you can withdraw at any time with the "Cookie settings" link in the footer.
  • To keep the site secure and available. Legal basis: our legitimate interest in running a safe website.

Who we share it with

We do not sell or rent personal data. We share it only with service providers that help us run the site, and only for that purpose:

  • EmailJS, which delivers your contact form message to our inbox.
  • Google (Google Analytics), only if you accepted analytics cookies.
  • Cloudflare, which hosts and protects the site.

These providers may process data outside South Africa and the European Economic Area. Where that happens, we rely on their contractual safeguards for international transfers. We may also disclose data when the law requires it.

How long we keep it

We keep contact form messages for as long as we need them to deal with your inquiry and keep a record of our conversation. Analytics data is kept according to the retention period set in Google Analytics. You can ask us to delete your data at any time.

Your rights

Under POPIA and GDPR you can ask us to:

  • tell you what personal data we hold about you and give you a copy;
  • correct or delete it;
  • stop or limit how we use it, or object to our use of it;
  • withdraw consent you gave earlier, for example for analytics cookies.

To use any of these rights, send us a message through the contact page. You can also complain to the Information Regulator of South Africa or, if you are in the EU or the UK, to your local data protection authority.

Cookies

The only cookies this site sets are Google Analytics cookies, and only after you accept them. Your choice is stored in your browser so we do not ask again. The "Cookie settings" link in the footer lets you change your mind.

Security

We protect personal data with access controls and encryption in transit. No website can promise perfect security, but we take it seriously: see our security and compliance page.

Children

This site is for businesses and is not aimed at children under 18. We do not knowingly collect their data.

Changes

If we change this policy, we will post the new version here with a new date.

Contact

Questions about this policy or your data: use the contact page.