Privacy Policy

Last updated 9 September 2026 · Effective 9 September 2026

1. Who the responsible party is

ARKCRM (Pty) Ltd, registration number 2026/190089/07, is the responsible party for the personal information described in this policy. You can contact us at info@arkcrm.co.za.

2. Two roles

ArkCRM plays two different roles under South African data protection law. For the account and billing details of the businesses that subscribe to ArkCRM, ArkCRM is the responsible party: we decide why and how that information is processed. For the customer data those businesses enter about their own customers — names, contact details, job history and the like — ArkCRM is an operator: we process it only on that business's instructions, on their behalf.

3. What we collect

We collect account and contact details for the people who sign up and use ArkCRM; billing details needed to invoice you (card data itself is handled by our payment provider and is never stored by ArkCRM); the business data you enter into the product, such as your customers, jobs, quotes and invoices; and usage and log data generated as you use the service.

4. Why we process it

We process personal information to provide the service, to bill you for it, to send the messages you configure to your customers, and to support you when you contact us.

5. Who we share it with

We share personal information only with the following categories of recipient: our payment provider, to process payments; our WhatsApp, SMS and email delivery providers, to send the messages you configure; and our hosting provider, to run the service. We do not sell personal information, ever.

6. Where it is stored and for how long

Your data is stored for as long as your account is active. If you cancel, your account and its data become read-only for 30 days, during which you can export it or reactivate your subscription. 30 days after cancellation, all data belonging to your account is permanently deleted and cannot be recovered.

7. Your rights under POPIA

Under the Protection of Personal Information Act 4 of 2013 (POPIA), you have the right to access the personal information we hold about you, to have it corrected if it is inaccurate, to have it deleted where the law allows, and to object to certain kinds of processing. If you believe we have not handled your personal information properly, you may lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.

8. Security

We encrypt data in transit, keep each customer's data isolated from every other customer's (tenant isolation), and restrict access to personal information through access controls.

9. Cookies

Details of what the website and app store in your browser are set out in our Cookie Notice.

10. Contact for privacy queries

Privacy questions or requests: info@arkcrm.co.za.

11. Effective date

This policy is effective from 9 September 2026.