POPIA Compliant
Privacy Policy
Last updated: 1 June 2026 · Governed by the Protection of Personal Information Act 4 of 2013 (POPIA)
Contents
- 1. Responsible party (POPIA Section 1)
- 2. Personal information we collect
- 3. Purpose of processing
- 4. Consent and your rights
- 5. Sharing of personal information
- 6. Security measures
- 7. Retention of personal information
- 8. Cookies and analytics
- 9. Third-party services
- 10. Children's privacy
- 11. Changes to this policy
- 12. Contact the Information Officer
1. Responsible party (POPIA Section 1)
- FlowLeads is operated by FlowLeads (Pty) Ltd (Registration No. 2026/365638/07), who is the responsible party for personal information collected through this platform. Registered address: Carrington Heights, Durban, 4001, South Africa.
- Contact the Information Officer (Pieter Muller): hello@flowleads.co.za
2. Personal information we collect
- Contact information: name, email address, phone number (collected only at the point you choose to request service-provider contact).
- Property and service-need information: suburb / city, property type, owner / authorisation status, and the specifics of the service you are requesting. For solar this includes your estimated monthly electricity bill and roof type; for plumbing, the type of job and its urgency; for electrical work, the work type (new install, repair, COC, fault-finding); for security installation, the system type. All such information is used solely to size and route your quote.
- Device information: IP address, browser type, and pages viewed (collected automatically for security and analytics).
- Consent record: timestamp and wording of consent given when you submit a quote request (required by POPIA).
- We do not collect: ID numbers, banking information, salary information, or any special personal information as defined by POPIA.
3. Purpose of processing
- To generate your personalised home-services quote — savings estimate (for solar) or scope-and-cost match (for plumbing, electrical, security) — based on the information you provide.
- To match you with vetted local service providers in your area, each registered with the relevant SA industry body (SAPVIA for solar, IPSASA for plumbing, the Department of Employment and Labour for electricians, PSiRA for security), only after you provide explicit consent.
- To send you your quote by email and / or WhatsApp.
- To comply with our legal obligations under the Protection of Personal Information Act 4 of 2013 (POPIA).
- We do not use your information for any other purpose without obtaining separate, specific consent.
4. Consent and your rights
- We process your personal information only with your consent. You provide consent explicitly by checking the consent box when submitting your quote request.
- Right to access: you may request a copy of all personal information we hold about you.
- Right to correction: you may request correction of inaccurate information.
- Right to deletion: you may request that we delete your personal information. We will do so within 30 days unless we are legally required to retain it.
- Right to object: you may object to processing of your personal information at any time.
- To exercise any of these rights, email hello@flowleads.co.za or use the opt-out link in any email we send you.
6. Security measures
- All data is transmitted using TLS 1.3 encryption (HTTPS).
- Personal information is stored in encrypted PostgreSQL databases hosted in Johannesburg (or South African-jurisdiction cloud regions).
- Access to personal data is limited to authorised personnel on a need-to-know basis.
- We conduct regular security reviews and penetration tests.
- In the event of a data breach that poses a risk to data subjects, we will notify the Information Regulator within 72 hours and affected data subjects without undue delay, as required by POPIA.
7. Retention of personal information
- Quote data (anonymised): retained for 24 months for statistical analysis and product improvement.
- Contact information: retained for 12 months after your last interaction, unless you request earlier deletion.
- Consent records: retained for 5 years (POPIA compliance requirement).
- Analytics data: aggregated and anonymised after 30 days.
9. Third-party services
- Email delivery: transactional emails are sent via a third-party email service provider under a data processing agreement.
- Cloudflare Turnstile: we use Cloudflare's privacy-first bot protection on our quote form. Cloudflare's privacy policy applies to data processed by their service.
- PVGIS irradiance data (solar quotes only): we query the EU Joint Research Centre PVGIS API to retrieve solar resource data for your city. No personal information is transmitted to this service.
10. Children's privacy
- Our platform is not directed at children under the age of 18. We do not knowingly collect personal information from minors.
- If you believe we have inadvertently collected information from a minor, please contact us at hello@flowleads.co.za and we will delete it immediately.
11. Changes to this policy
- This Privacy Policy was last updated on 1 June 2026. We may update this policy from time to time to reflect changes in our practices or applicable law.
- We will notify you of material changes by email (if you have an account) or by posting a prominent notice on our website.
- Continued use of the platform after changes are posted constitutes acceptance of the updated policy.
12. Contact the Information Officer
- For any privacy-related queries, complaints, or requests to exercise your rights under POPIA:
- Email: hello@flowleads.co.za
- You may also lodge a complaint with the Information Regulator: https://inforegulator.org.za