← Back to Home

Legal

Privacy Policy & Data Disclosure

This site is built so that it does not need to know who you are. It sets no cookies, uses privacy-friendly cookieless analytics and collects no personal information unless you choose to contact us or submit our contact form.

The short version

If you read nothing else on this page, the above is the whole of our automated data collection. The rest of this document explains the few places where information can still arise, which is unavoidable for any website.

1. Who is responsible for your information

Kirov Dynamics Technology (Pty) Ltd ("Kirov Dynamics", "we", "us") is the responsible party for the personal information described in this policy. We are a company registered in South Africa and we handle your information in line with the Protection of Personal Information Act 4 of 2013 (POPIA) and, where applicable, the EU General Data Protection Regulation.

Our contact details appear at the foot of every page on this site. Queries about this policy, or a request to exercise any of your rights, can be sent to info@kirovdynamics.co.za and will be answered in writing.

2. Information this website collects on its own

We have deliberately built this site so that visiting it does not create a record of you. Specifically:

• No cookies. The site sets no cookies, first-party or otherwise.
• Cookieless analytics. We use Umami, a self-hosted, privacy-friendly analytics tool, to count visits and page views in aggregate. Umami runs without cookies and without visitor identifiers: it does not profile you, does not build a personal profile, and cannot identify you. The only technical data involved is a short-lived count of page views, which keeps your visits anonymous.
• One contact form. The homepage has a single contact form ("Book Free Problem Check"). When you submit it, the details you enter (first name, last name, email, company, and your message) are transmitted over HTTPS to Formspree — a separate, third-party form provider — which forwards them to us by email. Neither Formspree nor we use that information for marketing lists or any other purpose.
• No embedded content. We do not embed videos, maps, social widgets or third-party iframes, because each of those would report your visit to its own operator. The analytics script described above is the only third-party request the site can make.

The one piece of data our site stores, and why

Every page sets a single value in your browser's session storage, under the key rth:last. It holds the path of the page you were last on so that a page refresh returns you to the homepage instead of trapping you on a sub-page. It is:

• used only for that one function, with no other purpose;
• never transmitted to us or to anyone else;
• automatically deleted when you close the tab or window, because session storage does not survive the session.

It cannot identify you, it is not shared, and blocking storage removes it with no effect on the site. You can clear it at any time through your browser's site-data controls.

3. Information our hosting provider handles

This site is hosted on GitHub Pages. As with any web host, GitHub processes technical connection information in order to serve you the page, which can include your IP address, the date and time of the request, the page requested and your browser's user-agent string. This is done on GitHub's infrastructure, which is outside South Africa, so it involves a cross-border transfer of that limited technical data. We do not add to it, and we do not ask GitHub to keep anything beyond its standard operational logs.

• Analytics (Umami). Our analytics tool is hosted by us (self-hosted, cookieless). It receives a page view even when you have not typed anything in, but is configured to track nothing identifying: no cookies, no visits are tied to you as a person.
• Contact form (Formspree). The homepage contact form submits to Formspree, a United States-based form service. Because Formspree's servers are outside South Africa, submitting the form involves a cross-border transfer of the information you type in §2. Formspree is bound to process it only to deliver it to us, and to retain it for only the short period needed for that delivery. You can equally reach us directly by email at the address below and avoid the form entirely.

4. Images supplied by Unsplash

The photographs on our homepage are served from Unsplash's image delivery network rather than from our own server. When your browser fetches one of those images, Unsplash receives the request, which necessarily includes your IP address and the page you loaded it from. We have no access to that information and no control over Unsplash's own processing of it. Every other image on this site is hosted by us.

We have self-hosted our web fonts for the same reason: loading a font from a third-party server hands that provider your IP address. The fonts you are reading this with are served from this domain and go nowhere else.

5. Information you give us directly

If you submit the contact form on the homepage, we receive the details you typed in (first name, last name, email address, company/organisation and your message). If you email or call us directly, we will hold whatever you send us, which may include:

• your name, email address, telephone number, company or organisation and job title;
• the business problem, process or system you describe, including documents, screenshots or data you choose to send;
• our correspondence with you, including the substance of any engagement.

6. Why we are allowed to hold it, and what we do with it

Under POPIA we may only process personal information where a lawful ground applies. Ours are:

Purpose	Lawful ground
Answering your enquiry and arranging a free problem check	Taking steps at your request prior to entering a contract
Preparing and delivering an assessment, project or Kirov Care service	Performance of a contract with you
Record-keeping, invoicing and tax compliance	Compliance with a legal obligation, including the Tax Administration Act and Companies Act
Understanding recurring problems so we can improve our services	Our legitimate interests, balanced against your rights; we anonymise before doing so
Defending or claiming legal rights	Legitimate interests and your legal rights

We do not use your information for marketing lists, and we do not sell it. If you ask us to add you to product announcements, that is a separate, optional consent which you can withdraw at any time.

7. Special personal information

Special categories such as health, biometric, genetic, religious or union information, and children's information, receive stricter protection under POPIA. We do not ask for, request or knowingly receive any of it through this site. If such information reaches us unintentionally, tell us and we will delete it promptly.

8. Who else can see it

We do not sell or share your personal information with third parties for their own purposes. We disclose it only where necessary and lawful, namely to:

• service providers who host, secure or support our systems, under written confidentiality obligations;
• professional advisers such as our lawyers or accountants, where a legal or accounting duty requires it;
• law enforcement or a regulator where we are legally required to disclose it;
• a buyer of the business in a genuine corporate transaction, subject to this policy continuing to apply.

Where we send information outside South Africa, we rely on an appropriate safeguard, which for us currently means standard contractual clauses and the provider's own published transfer terms.

9. How long we keep it

We keep enquiry information for as long as needed to deal with your request and any resulting engagement, and record-keeping information for the period the law requires, commonly five years for accounting records under the Tax Administration Act. Information that has no further purpose is deleted or anonymised when that purpose ends.

10. How we protect it

We apply technical and organisational measures proportionate to the risk: encryption in transit (TLS) wherever data is sent or served, access restricted to the people who need it, encryption at rest on systems holding client data, least-privilege administration, logging of administrative access, patching and vulnerability management, and confidentiality obligations in every contract we sign. No system is perfectly secure, and we will never ask you to send credentials or sensitive production data over ordinary email.

11. Your rights

Subject to the lawful exceptions in POPIA, you have the right to:

• be told whether we hold personal information about you, and get a copy of it;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete information we no longer have a lawful reason to keep;
• object to processing based on our legitimate interests, and to direct processing to automated decision-making;
• withdraw a consent you have given, without affecting the lawfulness of processing before you did;
• complain to the Information Regulator of South Africa if you believe we have mishandled your information.

Send requests to info@kirovdynamics.co.za. We respond in writing within a reasonable period, normally 30 days, and we do not charge for a request unless it is manifestly unfounded or excessive. We may need to confirm your identity first; we will tell you if we do. You may appoint someone to make a request on your behalf.

12. Children

This site is a business site and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us information, contact us and we will remove it.

13. Changes to this policy

We will update this page when our practices change, and we will change the date at the foot of the page. Material changes affecting your rights will be communicated directly to clients rather than only here.