This is what we collect, why we collect it, who else sees it, and how to get it back or have it deleted. It applies to your 3XRANK account and to the services you run with us.
01What this covers
This policy explains what we do with your information when you use the 3XRANK client area, our hosting, or any service you buy from us. It is written to meet POPIA in South Africa and the GDPR where it applies to you.
02What we collect
Only what we need to run your services and bill you correctly.
- Your name, business name, email address, phone number and billing address
- Your domains, services, invoices and payment history
- Support tickets and the messages in them
- Login times, IP addresses and browser details, kept for security
- Basic usage of the client area, so we can see which pages confuse people
We do not store your full card number. Card details go straight to the payment provider and never touch our servers.
03Why we hold it
To provide the service you bought, to send invoices and renewal notices, to answer your support tickets, to keep your account secure, and to meet our legal and tax obligations. That is the whole list.
04Who we share it with
Only the providers needed to deliver your services, and only the part each one needs.
- Payment providers: Payfast, Paystack, Stripe and PayPal
- Domain registries and registrars, who require registrant details by law
- Our hosting infrastructure providers
- Email and helpdesk systems used to reach you
We do not sell your information, we do not rent your mailing address, and we do not pass your details to marketers. Not for any price.
05Your website visitors
When you run a site with us, you are the responsible party for the personal information your visitors give you through forms, orders or bookings. We process it on your behalf and only on your instruction.
Your site needs its own privacy notice covering that. Ask us and we will help you write one.
06Analytics and cookies
The client area uses a session cookie to keep you logged in, and a small preference cookie so it remembers things like a dismissed banner. Neither is used for advertising.
Where you have connected Google Analytics or Search Console to a site, that data belongs to your property and is governed by Google terms as well as this policy.
07Where it is stored
Account and billing data is stored on servers in South Africa. Hosting data sits on the server your plan runs on, which may be in South Africa, Europe or the United States depending on the plan you chose.
Backups are encrypted at rest and kept for the retention period on your plan.
08How long we keep it
Account and invoice records are kept for five years after your last service ends, because tax law requires it. Support tickets are kept for two years. Server logs are kept for 90 days.
Site files and databases are deleted 30 days after a service is cancelled. Ask for an export before then.
09Your rights
You can ask us for a copy of everything we hold about you, ask us to correct it, or ask us to delete what we are not legally required to keep. You can also object to any processing you disagree with.
Email juanita@3xrank.co and we will respond within 30 days. There is no charge for a reasonable request.
10Security
Logins are encrypted, passwords are hashed, two factor login is available on every account, and access to client data is limited to the people who need it to do their job.
If a breach ever affects your information, we will tell you and the Information Regulator, promptly and without spin.
11Changes and contact
We update this policy when what we do changes. Material changes are announced in your client area and by email. Every version is dated.
Questions, or a complaint, go to juanita@3xrank.co or 061 536 9032. If you are not satisfied, you may complain to the Information Regulator of South Africa.
