Privacy Policy
Effective Date: 01-01-2026
Growth Copilot
by Growth Copilot (Pty) Ltd
A. Introduction
Growth Copilot (Pty) Ltd ("we," "us," or "our") is committed to protecting your privacy and ensuring that your personal information is collected and used properly, lawfully, and transparently in accordance with the Protection of Personal Information Act, 4 of 2013 ("POPIA") of South Africa.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit or use our website growthcopilot.co.za and our services.
B. Information We Collect
a) Personal Information
When provided voluntarily or when required to provide our services, we may collect:
Full name
Email address
Phone number
Company name
Billing information
Physical or postal address
Any other information you submit via forms, email, or direct communication
b) Non-Personal Information
We may collect technical and usage information such as:
IP address
Browser type and version
Device information
Operating system
Pages visited and time spent on the website
Referring website addresses
This information is used for analytics, security, and service improvement purposes.
C. How We Use Your Information
We may use your personal information for the following purposes:
a) Providing and personalising our services
b) Processing transactions and delivering products or services
c) Responding to inquiries and providing customer support
d) Sending service-related communications (including emails, SMS, or calls)
e) Improving our website, services, and user experience
f) Complying with legal and regulatory obligations
Mobile & Messaging Data Protection
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
Information sharing with subcontractors for support services (such as customer service, hosting, or payment processing) is permitted under strict confidentiality agreements.
All other use cases exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
D. Legal Basis for Processing (POPIA)
We process personal information only when:
You have given consent
It is necessary to perform a contract with you
We are legally required to do so
It is in our legitimate business interests and does not override your rights
E. Disclosure of Information
We do not sell or rent your personal information.
We may disclose your information only:
To service providers who assist us in operating our website or business
When required by law or legal process
To protect our rights, property, or safety, or that of our users
All third parties are required to protect your information and use it only for the agreed purpose.
F. Cross-Border Data Transfers
Where personal information is transferred to, stored, or processed outside the Republic of South Africa, including through our use of cloud-based software and service providers such as HighLevel, we will take reasonable steps to ensure that such transfers comply with section 72 of the Protection of Personal Information Act 4 of 2013 (“POPIA”).
As part of providing our services, personal information may be transferred to and processed by service providers located outside South Africa. Our use of HighLevel, a cloud-based software platform operated by HighLevel, Inc. in the United States, may result in personal information being transferred to, stored in, or processed in the United States and other jurisdictions in which HighLevel or its subprocessors operate.
In accordance with POPIA, we will only transfer personal information to a recipient in a foreign country where the transfer is permitted under section 72. This may include circumstances where:
the recipient is subject to a law, binding corporate rules, or a binding agreement that provides an adequate level of protection for the personal information and includes appropriate safeguards concerning the further transfer of personal information;
the data subject has consented to the transfer;
the transfer is necessary for the performance of a contract between the data subject and us, or for the implementation of pre-contractual measures taken at the data subject’s request;
the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between us and a third party; or
the transfer is otherwise permitted under an applicable provision of POPIA.
Where we use an external service provider to process personal information on our behalf, we will take reasonable steps to ensure that appropriate contractual and other safeguards are in place and that the service provider processes personal information only for authorised purposes and in accordance with applicable data protection requirements.
HighLevel acts as a processor of customer personal data under its Data Processing Addendum and provides contractual protections governing the processing of customer personal data and the use of subprocessors. HighLevel's infrastructure and subprocessors may include entities located in the United States and other countries.
We will take reasonable measures to ensure that any onward transfer of personal information by our service providers is subject to appropriate safeguards and is carried out in accordance with applicable data protection laws.
Where POPIA requires consent or any additional authorisation or safeguard for a particular cross-border transfer, we will obtain or implement the applicable requirement before making the transfer.
G. Cookies and Tracking Technologies
We use cookies and similar technologies to:
Improve website functionality
Analyse website traffic
Remember user preferences
You may disable cookies in your browser settings, but this may affect website functionality.
H. Your Rights Under POPIA
You have the right to:
Access your personal information
Request correction or deletion
Object to processing
Withdraw consent at any time
Lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, contact us at:
I. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
J. Security
We implement reasonable technical and organisational security measures to protect your personal information against:
Loss
Misuse
Unauthorised access
Disclosure
Alteration
Destruction
However, no system is completely secure, and we cannot guarantee absolute security.
K. Information Officer (POPIA Requirement)
In accordance with POPIA, our Information Officer is:
Name: Nkanyiso Mhlongo
Email: [email protected]
The Information Officer is responsible for ensuring compliance with data protection laws.
L. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page and will become effective immediately upon publication.
M. Contact Us
If you have any questions about this Privacy Policy or how your information is handled, please contact us:
Copyrights 2026 Growth Copilot (Pty) Ltd