Data Processing Information

This page gives a plain-language overview of how Delrity processes personal information. It is provided for transparency and is not a contractual Data Processing Addendum (DPA). It should be read together with our Privacy Policy and our POPIA Compliance page.

Under South Africa’s Protection of Personal Information Act (POPIA), there are two roles that matter here:

• Your account data. For the personal information you give us to run your account (such as your name, email, and billing details), Delrity is the responsible party.
• Your website visitors’ and customers’ data. When you use Delrity to collect information from your website’s visitors - for example, through pre-order forms, or through orders placed at your storefront if you use Commerce - you are the responsible party, and Delrity acts as an operator processing that information on your behalf.

We process personal information only to provide and operate the Service - creating and managing accounts, publishing and hosting websites, processing subscriptions and payments, sending transactional emails, providing support, and keeping the platform secure. The categories of information we handle are described in our Privacy Policy.

We use a small number of trusted operators (subprocessors) to run the Service, under written agreements and appropriate safeguards. The current list, including each provider’s purpose and location, is on our Subprocessors page.

We apply technical and organisational measures - including encryption in transit, hashed passwords, access controls, and managed database backups - to protect personal information. More detail is on our Security page.

Some of our operators process personal information on servers located outside South Africa. Where this happens, we rely on the safeguards permitted under section 72 of POPIA, including contractual protections that require a comparable level of protection to that provided under POPIA.

We retain personal information for as long as your account is active and as needed to provide the Service. When you close your account, we delete or anonymise personal information within a reasonable period, unless we are required to retain it for legal, accounting, or security purposes. For example, when an account or organisation is deleted, we keep a de-identified financial record of paid orders (amounts and order details, with the customer’s name, email, and phone number removed) as required for accounting purposes. We also keep the records we need to run the platform safely and fairly: payment records, abuse reports, an audit trail of administrative actions, and a one-way hash of the email address used to claim a free trial.

Where Delrity acts as an operator on your behalf, we process personal information in line with your use of the Service and applicable law. You remain responsible for having a lawful basis and appropriate notices for information you collect from your visitors. To exercise your own data-protection rights, see the Privacy Policy.

For questions about how we process personal information, email privacy@delrity.com.