Your information, and what happens to it.

1. Who is responsible

The responsible party is Oryares Solutions, run by Rusumba Bukanga, Johannesburg, South Africa. The Information Officer is Rusumba Bukanga. You can reach him at rusumba@oryares.solutions or +27 68 901 8305. Every request in this notice goes to that address.

2. What is collected

Through the enquiry form: your name, your email address, your company name if you give it, the message you write, and which page you sent it from. The time it arrived is recorded with it.

Through the booking link: the name, email address and any notes you enter when you book a call. Bookings are handled by Google Calendar.

Through the website itself: the hosting provider keeps standard server logs (IP address, browser and the page requested) for security and to keep the site running. No analytics or advertising cookies are set unless you accept them (see section 3).

Please do not send special personal information (health, religion, race, biometrics, criminal history and similar, as defined in section 26) or information about children. It is not needed to answer an enquiry.

3. Cookies and analytics

When you first visit, a bar at the bottom of the page asks whether you accept analytics and advertising cookies. Until you click Accept, no Google script is loaded and nothing is sent to Google. Your choice is stored in your own browser, under the name oryares-consent, so the site does not ask again on every page.

If you accept, the site uses two Google services, both provided by Google LLC:

• Google Analytics, to understand which pages lead people to get in touch;
• Google Ads conversion measurement, to see whether adverts for Oryares Solutions lead to enquiries.

With your consent, Google collects the pages you view, your approximate location (country and city, worked out from your IP address), your device and browser type, the site that referred you, and conversion events: sending the enquiry form, and clicking a WhatsApp, email or booking link. The contents of the enquiry form, including your name, email address and message, are never sent to Google.

Analytics data is kept for up to 14 months and then deleted. Google processes it in the United States and other countries (see section 6). Google's own privacy policy also applies to how Google handles it.

You can change your mind at any time with the Cookie settings link in the footer of every page. Withdrawing stops any further collection and the site removes the Google cookies it can reach. Declining changes nothing about using the site: every page, the enquiry form, WhatsApp and the booking link work exactly the same.

4. Why, and on what basis

Information you send through the form or the booking link is used for one purpose: to reply to your enquiry and, if you ask, to arrange and prepare for a call or an engagement. It is not sold, not shared for anyone else's marketing, and not added to a mailing list. You will not receive direct marketing unless you ask for it (section 69).

The lawful basis is that processing is needed to take the steps you asked for before a possible contract (section 11(1)(b)), and the legitimate interest of answering people who write in (section 11(1)(f)). Analytics and advertising measurement rely only on your consent (section 11(1)(a)), which you can withdraw at any time (section 11(2)(b)).

Giving the information is voluntary. Without a name, an email address and a message, there is no way to reply to you.

5. Who else processes it

These service providers process information on behalf of Oryares Solutions, each under its own data processing terms (sections 20 and 21):

• Vercel hosts the website and runs the form handler. The form handler runs in Dublin, Ireland.
• Supabase stores enquiries in a database in Ireland.
• Google provides email and Google Calendar, used for replies and bookings, and, only if you accept cookies, Google Analytics and Google Ads.

Information is disclosed to anyone else only where the law requires it.

6. Transfers outside South Africa

Enquiries are stored and processed in Ireland, which is subject to the EU General Data Protection Regulation. Google and Vercel may also process information in the United States and other countries. These transfers rely on section 72(1)(a): each provider is bound by data processing terms that give protection substantially similar to POPIA. Google Analytics and Google Ads data, collected only with your consent, is processed by Google LLC in the United States and other countries under the same arrangement. Writing in through the form, booking a call or accepting cookies means your information will be processed in those places.

7. How long it is kept

Enquiries are deleted automatically twelve months after they arrive, or sooner if you ask. Analytics data, if you accepted, is kept for up to 14 months. If an engagement follows, records needed for the contract, invoicing and tax are kept for as long as South African law requires (section 14).

8. How it is protected

Information travels over encrypted connections (HTTPS). The enquiries database cannot be read from the website. Only the server writes to it, and only the Information Officer can read it. If a security compromise affects your information, you and the Information Regulator will be told as soon as reasonably possible (section 22).

9. Your rights

Under POPIA you can:

• ask whether information about you is held, and for a copy of it (section 23);
• ask for it to be corrected, or deleted (section 24);
• object to its processing (section 11(3));
• refuse direct marketing (section 69);
• complain to the Information Regulator (section 74).

Write to rusumba@oryares.solutions. You will get an answer within ten working days. Before releasing information, you may be asked to confirm your identity, so that it is not given to the wrong person.

10. Complaints

Please raise any concern with the Information Officer first, so it can be put right. You can also complain directly to the Information Regulator:

Changes

If this notice changes, the new version is published here with a new date.

Last updated 18 October 2026.