Skip to content
NEXERA-IN

Legal

Privacy Policy

Last updated: 11 October 2026

This policy explains what personal information NEXERA-IN collects, why, and what your rights are under the Protection of Personal Information Act, 2013 (POPIA). We keep it short and plain on purpose.

1. Who we are

Nexera-In (Pty) Ltd (registration number REG_NO), trading as NEXERA-IN, is the responsible party for your personal information.

  • Information officer: Gerdus van Rooyen
  • Email: [email protected]
  • Physical address: ADDRESS, South Africa

2. What we collect

We only collect what we need for the thing you asked for:

  • When you join a waitlist, book a demo or ask to be notified: name, email, and for CPM Suite also company, role, number of users and phone number.
  • When you subscribe to templates and launch news: your email address.
  • When you contact us: name, email, optional phone number and your message.
  • When you buy: name, email, what you bought, the amount, and the payment reference from PayFast. We never see or store your card or bank details — PayFast handles payment.
  • When you use My Account: a login session record and a log of your downloads (date, product, and a one-way hash of your IP address).
  • Consent records: the date and time you ticked a consent box, and which version of the wording you agreed to.

3. Why we use it (purpose and lawful basis)

  • To deliver what you bought, send your receipt and give you access to your downloads (performing our contract with you).
  • To contact you about the product you registered interest in, or send the templates and news you signed up for (your consent).
  • To answer your questions (your consent / legitimate interest).
  • To keep tax and accounting records (legal obligation).
  • To protect the site against abuse, for example limiting how many requests come from one address (legitimate interest).

We do not sell or rent your personal information. We only send direct marketing if you opted in, and every marketing email has a way to unsubscribe (POPIA section 69).

4. Who we share it with

We use a small number of service providers (operators) who process information on our behalf under contract:

  • Cloudflare — hosting, database, file storage and cookie-free website analytics.
  • PayFast — payment processing.
  • Resend — sending emails (receipts and login links).

Some of these providers store data outside South Africa. Where that happens we rely on POPIA section 72: the provider is bound by laws or agreements giving protection substantially similar to POPIA.

We may also disclose information where the law requires it.

5. How long we keep it

  • Leads and newsletter subscribers: until you unsubscribe or ask us to delete it, or 24 months after our last contact.
  • Customer and order records: for 5 years after the transaction, as required for tax purposes.
  • Login links expire after 15 minutes; login sessions after 30 days.

6. How we protect it

Data is stored with Cloudflare, encrypted at rest, and sent over HTTPS only. Login tokens and session identifiers are stored as one-way hashes. Download links are signed, tied to your account and expire after 15 minutes. Access to the admin area is restricted to the information officer.

If we become aware of a security compromise affecting your personal information, we will notify you and the Information Regulator as POPIA requires.

7. Your rights

You may at any time:

  • ask what personal information we hold about you and get a copy;
  • ask us to correct or delete it;
  • object to us using it, or withdraw your consent (this does not affect anything done before you withdrew);
  • unsubscribe from marketing.

Use the “Request deletion of my data” button in My account, or email [email protected]. We will respond within 30 days.

If you are not happy with how we handled your request, you may complain to the Information Regulator (South Africa) — inforeg.org.za, [email protected].

8. Cookies

We use one cookie: a secure login session cookie, set only when you log in to My Account. Our analytics (Cloudflare Web Analytics) do not use cookies and do not track you across sites.

9. Children

Our products are for construction professionals. We do not knowingly collect information from anyone under 18.

10. Changes

If we change this policy we will update the date at the top of this page. Significant changes will be emailed to customers.