Privacy Policy

1. Responsible company

Vanguardtech (Pty) Ltd, registration 2024/004915/07, operates this website and VPulse. Registered address: 14 Maluti Road, Ravenswood, Boksburg, 1459, South Africa. Privacy requests: info@vanguardtech.co.za, addressed to the Information Officer.

We determine the use of website enquiries, accounts, billing and direct client relationship information. For data handled only on a client’s instructions in hosted systems or development/support, the client generally determines the purpose and we act for the agreed service.

2. Corporate website and service information

Depending on your interaction, we process names, company details, email, phone, project requirements, correspondence, account records, invoices, payment references, hosting/domain details and authorised technical access. Technical operation can produce IP addresses, browser/request details, security events and diagnostic records.

A requested website health check uses the supplied address and collected public website evidence. Our contact form prepares a WhatsApp enquiry for you to send; sending it shares the chosen information with WhatsApp/Meta and Vanguardtech. Email and messaging also have their own providers. Do not send credentials or unrelated personal information in a general enquiry.

3. Purposes, legal grounds and choices

We process information to answer enquiries, scope and deliver services, manage accounts, verify payments, keep records, support clients and protect systems. Relevant grounds may include a requested/existing agreement, legal obligations, legitimate operational interests or consent where appropriate.

Details needed for a requested service may be necessary to deliver it; optional analytics, marketing permissions and integrations are your choice. If required information is withheld, the related feature may not work. Marketing follows applicable consent and opt-out rules. We do not sell personal information.

4. Providers and client-directed processing

Delivery can involve hosting/cloud companies, domain registries, email and messaging providers, billing systems, PayFast where selected and agreed specialists. We share information needed for the service or law. Clients must be authorised to provide their data and instructions. Written processing arrangements should define access, safeguards and return/deletion obligations.

Providers or connected services may process information outside South Africa. Transfers we control require an applicable lawful basis and appropriate safeguards. Customer-selected connections also have their own policies and permissions.

5. Security, retention and requests

We apply safeguards appropriate to the service, including access controls and security measures. No system is risk free. Report suspected compromise promptly; we assess incidents and make notifications where law requires.

Records are retained for their purpose and applicable service, legal, accounting, security or dispute needs. Retention differs by category and plan. Cancellation is distinct from deletion. Export required data before access ends; external files and disaster-recovery copies can remain until separately removed or rotated.

Request access, correction, applicable deletion or objection by email. You may withdraw consent for consent-based processing without invalidating earlier lawful processing. We may verify identity and explain lawful limits. You may complain through the Information Regulator’s official channels at https://inforegulator.org.za/contact-us/.

6. Cookies and optional analytics

Essential storage supports site operation, security and remembering your choices. Google Analytics is loaded only after analytics is enabled in cookie controls. Use Cookie settings in the footer to change or withdraw the choice. The Cookie Policy explains the mechanism and its limits.

7. VPulse — Information we handle

Account information includes your name, company, email, optional phone number, sign-in and account preferences. Billing records include your selected plan, amount, payment reference, verified payment status, subscription dates and PayFast agreement identifiers. Payment credentials are handled by PayFast rather than supplied to our support team.

Service information includes website addresses, hosting account identifiers, monitor configurations and results, crawl and audit evidence, domain and certificate evidence, reports, incident history, activity and delivery records, public status-page selections and support messages.

Connected integrations may supply authorisation tokens and configuration, Google property data, WordPress inventory, mailbox metadata or other information needed by the tool you use. Full hosting backups may contain website content, databases, mail and personal information within your hosting account. Only connect content you are authorised to process.

Basic technical information such as IP addresses, request details and error records may be processed for authentication, security, troubleshooting and service operation. Optional notification subscriptions include the device endpoint and related delivery keys when you enable installed-app push.

8. VPulse — Providers and international processing

Information is shared with service providers to the extent needed for the service you use: PayFast for payment processing; hosting panels for authorised account operations; Google for connected analytics and search insights; Microsoft OneDrive or Dropbox for selected backup copies; your configured SMTP provider for email; and browser/device push infrastructure for enabled push delivery.

Hosting, infrastructure and connected providers may process information outside South Africa. We use applicable safeguards for transfers we control and require appropriate protection from our service providers. Your own provider connections are also governed by the permissions you grant and that provider's policies. We disclose information when legally required or necessary to address fraud, security incidents or lawful rights.

9. VPulse — Storage and security

We use access controls, protected integration configuration, authenticated requests and encryption for new retained backup copies. Backup keys and persistent protection keys are necessary for recovery and are protected separately by the application. Temporary processing files and decrypted content must be accessible to authorised processing components during transfer, verification, download or restoration.

These measures reduce risk but cannot guarantee that no unauthorised access, outage or loss will occur. Protect your accounts and connected provider access, use appropriate device security and contact us promptly if you suspect compromise. We will assess security incidents and make notifications where required by applicable law.

10. VPulse — Retention, disconnection and deletion

Service evidence and backup copies follow applicable plan history and retention settings. Billing, contractual, security and support records may be retained longer when needed for legal obligations, disputes or legitimate operational purposes. We do not promise a single deletion date for every category of information.

You can manage available backup copies and connected providers in VPulse. Deleting one storage copy does not necessarily delete copies elsewhere. Disconnecting an integration does not itself erase files in your provider account or all historical records. Contact us to request account or data deletion and an explanation of any records that must be retained.

After cancellation or expiry, access and automated work depend on the resulting plan. Export required backups and reports before access changes. Information in disaster-recovery copies can remain until those copies rotate; it is not used to restore deleted account data for ordinary service operation unless legitimately required.

Related policies and product rules