Skip to content
POPIA Compliant

Privacy Policy

Last updated: 1 June 2026 · Governed by the Protection of Personal Information Act 4 of 2013 (POPIA)

1. Responsible party (POPIA Section 1)

  • FlowLeads is operated by FlowLeads (Pty) Ltd (Registration No. 2026/365638/07), who is the responsible party for personal information collected through this platform. Registered address: Carrington Heights, Durban, 4001, South Africa.
  • Contact the Information Officer (Pieter Muller): hello@flowleads.co.za

2. Personal information we collect

  • Contact information: name, email address, phone number (collected only at the point you choose to request service-provider contact).
  • Property and service-need information: suburb / city, property type, owner / authorisation status, and the specifics of the service you are requesting. For solar this includes your estimated monthly electricity bill and roof type; for plumbing, the type of job and its urgency; for electrical work, the work type (new install, repair, COC, fault-finding); for security installation, the system type. All such information is used solely to size and route your quote.
  • Device information: IP address, browser type, and pages viewed (collected automatically for security and analytics).
  • Consent record: timestamp and wording of consent given when you submit a quote request (required by POPIA).
  • We do not collect: ID numbers, banking information, salary information, or any special personal information as defined by POPIA.

3. Purpose of processing

  • To generate your personalised home-services quote — savings estimate (for solar) or scope-and-cost match (for plumbing, electrical, security) — based on the information you provide.
  • To match you with vetted local service providers in your area, each registered with the relevant SA industry body (SAPVIA for solar, IPSASA for plumbing, the Department of Employment and Labour for electricians, PSiRA for security), only after you provide explicit consent.
  • To send you your quote by email and / or WhatsApp.
  • To comply with our legal obligations under the Protection of Personal Information Act 4 of 2013 (POPIA).
  • We do not use your information for any other purpose without obtaining separate, specific consent.

5. Sharing of personal information

  • We share your anonymised requirements (suburb, service type, and the service-specific details such as bill range, problem type, or system type — not your name or contact details) with matched service providers to obtain quotes.
  • We only share your contact information with a matched provider after you have explicitly consented to be contacted via the consent box on the quote form.
  • We do not sell, rent, or trade your personal information to any third party.
  • We may share information with service providers who process data on our behalf (email delivery, analytics) under written data processing agreements.
  • We may disclose information if required by law, court order, or to protect the rights and safety of FlowLeads or others.

6. Security measures

  • All data is transmitted using TLS 1.3 encryption (HTTPS).
  • Personal information is stored in encrypted PostgreSQL databases hosted in Johannesburg (or South African-jurisdiction cloud regions).
  • Access to personal data is limited to authorised personnel on a need-to-know basis.
  • We conduct regular security reviews and penetration tests.
  • In the event of a data breach that poses a risk to data subjects, we will notify the Information Regulator within 72 hours and affected data subjects without undue delay, as required by POPIA.

7. Retention of personal information

  • Quote data (anonymised): retained for 24 months for statistical analysis and product improvement.
  • Contact information: retained for 12 months after your last interaction, unless you request earlier deletion.
  • Consent records: retained for 5 years (POPIA compliance requirement).
  • Analytics data: aggregated and anonymised after 30 days.

8. Cookies and analytics

  • We use essential cookies necessary for the operation of the platform (session management, security).
  • We use analytics cookies (aggregated, anonymised) to understand usage patterns and improve the platform.
  • We do not use advertising or tracking cookies from third-party ad networks.
  • You can disable non-essential cookies in your browser settings. This will not affect your ability to use the platform.

9. Third-party services

  • Email delivery: transactional emails are sent via a third-party email service provider under a data processing agreement.
  • Cloudflare Turnstile: we use Cloudflare's privacy-first bot protection on our quote form. Cloudflare's privacy policy applies to data processed by their service.
  • PVGIS irradiance data (solar quotes only): we query the EU Joint Research Centre PVGIS API to retrieve solar resource data for your city. No personal information is transmitted to this service.

10. Children's privacy

  • Our platform is not directed at children under the age of 18. We do not knowingly collect personal information from minors.
  • If you believe we have inadvertently collected information from a minor, please contact us at hello@flowleads.co.za and we will delete it immediately.

11. Changes to this policy

  • This Privacy Policy was last updated on 1 June 2026. We may update this policy from time to time to reflect changes in our practices or applicable law.
  • We will notify you of material changes by email (if you have an account) or by posting a prominent notice on our website.
  • Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

12. Contact the Information Officer

  • For any privacy-related queries, complaints, or requests to exercise your rights under POPIA:
  • Email: hello@flowleads.co.za
  • You may also lodge a complaint with the Information Regulator: https://inforegulator.org.za