Last Updated: 5 November 2026
Digital-Forge (“we”, “us”, “our” or “the Business”) respects your privacy and is committed to protecting the personal information entrusted to us.
This Privacy Policy explains how we collect, use, process, store, protect and disclose personal information when you visit our website, contact us, use our services, or engage with any software, applications or digital solutions developed or provided by Digital-Forge.
We are committed to handling personal information responsibly and transparently, in accordance with applicable data protection legislation, including the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa.
Digital-Forge currently operates as an independently owned business and trades under the name Digital-Forge. References to “the Business” in this policy refer to this operating business.
By using our website or engaging with our services, you acknowledge that you have read and understood this Privacy Policy.
We collect only the information reasonably necessary to operate our business, communicate with customers, deliver services and maintain the security of our website and systems.
Depending on how you interact with Digital-Forge, we may collect the following categories of information:
Information you voluntarily provide, including:
When you visit our website or interact with our digital services, certain technical information may be collected automatically by our hosting, security and infrastructure providers.
This may include:
This information is used primarily for website functionality, troubleshooting, security monitoring and performance improvements.
When you engage Digital-Forge for software development, consulting, automation or other technology services, we may process additional information necessary to fulfil the agreed services.
This may include business information, operational data, application data, technical documentation, system configurations and other information supplied by you or your organisation.
We only process such information for legitimate business purposes and in accordance with the agreed scope of work.
We do not intentionally request sensitive personal information through our general website contact forms.
Where a project requires the processing of sensitive personal information, this will be handled only where legally permitted and subject to appropriate safeguards and any additional agreements required.
Personal information may be used for the following purposes:
We will not use your personal information for unrelated purposes without an appropriate lawful basis.
Digital-Forge recognises the growing role of artificial intelligence (AI), machine learning and automated technologies in modern software development.
Where AI-powered tools or services are used as part of our business operations or service delivery, we aim to ensure that personal information is handled responsibly and in accordance with applicable data protection requirements.
Our approach includes:
We do not intend to make decisions producing legal or similarly significant effects on individuals solely through automated processing without appropriate legal justification and safeguards.
Where a particular service involves material AI-driven processing of personal information, additional information will be provided where required.
Digital-Forge does not sell, rent or trade personal information to third parties.
We may share information with trusted third-party service providers where reasonably necessary to operate our business or deliver our services.
These may include:
Such providers may process information on our behalf and are expected to maintain appropriate confidentiality and security measures.
We may also disclose information where required by law, regulation, a valid legal process or to protect our legitimate rights and interests.
Where a third party processes personal information on our behalf, we will take reasonable steps to ensure that appropriate contractual and security safeguards are in place.
Some of the technology platforms, hosting providers and infrastructure services used by Digital-Forge may operate outside South Africa.
As a result, personal information may be stored or processed in other countries.
Where personal information is transferred outside South Africa, we will take reasonable steps to ensure that the transfer complies with Section 72 of POPIA.
This may include ensuring that the recipient is subject to adequate data protection laws, binding agreements or other legally recognised safeguards.
Where necessary, we will obtain the required consent or rely on another lawful basis permitted under applicable legislation.
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Our general retention approach is as follows:
When information is no longer required, reasonable steps will be taken to securely delete, destroy or anonymise it.
Deletion may be subject to legal retention requirements, legitimate dispute-related needs or technical limitations affecting secure backups.
Protecting customer and personal information is a priority.
Digital-Forge implements and maintains reasonable technical and organisational safeguards designed to protect information against:
Depending on the services involved, these safeguards may include access restrictions, authentication controls, encryption, secure hosting, backups, monitoring and other appropriate security measures.
Access to personal information is limited to what is reasonably necessary for legitimate business and service delivery purposes.
However, no website, application, cloud platform or electronic transmission can be guaranteed to be completely secure. While we take reasonable precautions, we cannot guarantee absolute security against every possible threat or unauthorised activity.
When Digital-Forge develops, maintains or supports software applications and digital solutions for customers, the handling of customer data will depend on the nature of the service and the agreed responsibilities of each party.
Where a customer provides personal information or operational data for processing through a system developed or maintained by Digital-Forge:
Depending on the nature of the engagement, Digital-Forge may act as a responsible party, an operator, or in another legally recognised capacity under applicable data protection legislation.
Where necessary, additional data processing agreements, confidentiality provisions or contractual safeguards will govern these arrangements.
Our website is intended to operate without unnecessary tracking or advertising technologies.
We do not intentionally use third-party advertising cookies or sell browsing information to advertisers.
Essential cookies or similar technologies may be used where required for website functionality, security or user preferences.
Third-party services integrated into the website may also collect limited technical information as part of their normal operation.
Where non-essential cookies or tracking technologies are introduced, appropriate disclosures and consent mechanisms will be implemented where required by applicable law.
Under POPIA, individuals have certain rights regarding their personal information.
Subject to applicable legal requirements and limitations, you may:
Requests relating to personal information can be submitted using the contact details provided below.
We may need to verify your identity before processing certain requests to protect your information from unauthorised disclosure.
In the event of a security compromise involving personal information under our responsibility, we will take reasonable steps to investigate, contain and address the incident.
Where a security compromise meets the notification requirements under POPIA, we will notify the Information Regulator and affected data subjects as required by law.
Notifications will be made within the applicable legal requirements and will include relevant information concerning the incident and recommended protective measures where appropriate.
Our website or services may contain links to external websites, applications or third-party platforms.
These services operate independently of Digital-Forge and may have their own privacy policies, security practices and terms of service.
We are not responsible for the privacy practices or content of external websites or services that we do not operate.
We encourage users to review the privacy policies of third-party services before providing them with personal information.
Our website and general business services are not specifically directed at children.
We do not knowingly collect personal information from children where such collection would require consent or authorisation that has not been obtained in accordance with applicable legislation.
Where personal information relating to a child must be processed as part of a legitimate business engagement, appropriate legal safeguards and authorisation requirements will apply.
Digital-Forge reserves the right to update or amend this Privacy Policy from time to time to reflect changes in legislation, technology, business operations, security practices or the services we provide.
Any updated version will be published on this website with a revised “Last Updated” date.
We encourage visitors and customers to review this policy periodically to remain informed about how their information is handled.
Where changes materially affect existing customers or the processing of their personal information, we will take reasonable steps to communicate those changes where appropriate.
For questions, concerns, complaints or requests relating to this Privacy Policy or the processing of personal information, please contact Digital-Forge through the following channel:
Business: Digital-Forge
Email: privacy@digital-forge.co.za
Website: digital-forge.co.za
All privacy-related requests will be reviewed and handled in accordance with applicable data protection legislation.
If you believe that your personal information has been processed unlawfully or that your rights under POPIA have been infringed, you have the right to lodge a complaint with the Information Regulator of South Africa.
Information Regulator (South Africa)
Website: inforegulator.org.za