Skip to content
FlowLeads
POPIA Compliant

Privacy Policy

Last updated: 1 June 2026 · Governed by the Protection of Personal Information Act 4 of 2013 (POPIA)

Contents

  1. 1. Responsible party (POPIA Section 1)
  2. 2. Personal information we collect
  3. 3. Purpose of processing
  4. 4. Consent and your rights
  5. 5. Sharing of personal information
  6. 6. Security measures
  7. 7. Retention of personal information
  8. 8. Cookies and analytics
  9. 9. Third-party services
  10. 10. Children's privacy
  11. 11. Changes to this policy
  12. 12. Contact the Information Officer

1. Responsible party (POPIA Section 1)

  • FlowLeads is operated by FlowLeads (Pty) Ltd (Registration No. 2026/365638/07), who is the responsible party for personal information collected through this platform. Registered address: Carrington Heights, Durban, 4001, South Africa.
  • Contact the Information Officer (Pieter Muller): hello@flowleads.co.za

2. Personal information we collect

  • Contact information: name, email address, phone number (collected only at the point you choose to request installer contact).
  • Property information: suburb/city, estimated monthly electricity bill, roof type (all used solely to size your solar quote).
  • Device information: IP address, browser type, and pages viewed (collected automatically for security and analytics).
  • Consent record: timestamp and wording of consent given when you submit a quote request (required by POPIA).
  • We do not collect: ID numbers, banking information, salary information, or any special personal information as defined by POPIA.

3. Purpose of processing

  • To generate your personalised solar savings quote (the primary purpose for which you provided your information).
  • To match you with SAPVIA-registered solar installers in your area (only after you provide explicit consent).
  • To send you your quote PDF by email.
  • To comply with our legal obligations under the Protection of Personal Information Act 4 of 2013 (POPIA).
  • We do not use your information for any other purpose without obtaining separate, specific consent.

5. Sharing of personal information

  • We share your anonymised requirements (bill amount, suburb, roof type — not your name or contact details) with matched installers to obtain quotes.
  • We only share your contact information with an installer after you have explicitly selected that installer and consented to contact.
  • We do not sell, rent, or trade your personal information to any third party.
  • We may share information with service providers who process data on our behalf (email delivery, analytics) under written data processing agreements.
  • We may disclose information if required by law, court order, or to protect the rights and safety of FlowLeads or others.

6. Security measures

  • All data is transmitted using TLS 1.3 encryption (HTTPS).
  • Personal information is stored in encrypted PostgreSQL databases hosted in Johannesburg (or South African-jurisdiction cloud regions).
  • Access to personal data is limited to authorised personnel on a need-to-know basis.
  • We conduct regular security reviews and penetration tests.
  • In the event of a data breach that poses a risk to data subjects, we will notify the Information Regulator within 72 hours and affected data subjects without undue delay, as required by POPIA.

7. Retention of personal information

  • Quote data (anonymised): retained for 24 months for statistical analysis and product improvement.
  • Contact information: retained for 12 months after your last interaction, unless you request earlier deletion.
  • Consent records: retained for 5 years (POPIA compliance requirement).
  • Analytics data: aggregated and anonymised after 30 days.

8. Cookies and analytics

  • We use essential cookies necessary for the operation of the platform (session management, security).
  • We use analytics cookies (aggregated, anonymised) to understand usage patterns and improve the platform.
  • We do not use advertising or tracking cookies from third-party ad networks.
  • You can disable non-essential cookies in your browser settings. This will not affect your ability to use the platform.

9. Third-party services

  • Email delivery: transactional emails are sent via a third-party email service provider under a data processing agreement.
  • Cloudflare Turnstile: we use Cloudflare's privacy-first bot protection on our quote form. Cloudflare's privacy policy applies to data processed by their service.
  • PVGIS irradiance data: we query the EU Joint Research Centre PVGIS API to retrieve solar resource data for your city. No personal information is transmitted to this service.

10. Children's privacy

  • Our platform is not directed at children under the age of 18. We do not knowingly collect personal information from minors.
  • If you believe we have inadvertently collected information from a minor, please contact us at hello@flowleads.co.za and we will delete it immediately.

11. Changes to this policy

  • This Privacy Policy was last updated on 1 June 2026. We may update this policy from time to time to reflect changes in our practices or applicable law.
  • We will notify you of material changes by email (if you have an account) or by posting a prominent notice on our website.
  • Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

12. Contact the Information Officer

  • For any privacy-related queries, complaints, or requests to exercise your rights under POPIA:
  • Email: hello@flowleads.co.za
  • You may also lodge a complaint with the Information Regulator: https://inforegulator.org.za