Privacy Policy

Last updated: June 2026 — updated to reflect migration from Wix to Vercel

1. Who we are

This privacy policy applies to Integrand BI (Pty) Ltd, a data consultancy registered in South Africa and based in Johannesburg. We provide data governance, data engineering, business intelligence, and AI advisory services to small and medium enterprises.

For any privacy-related queries, please contact Carl Carey at info@integrand.co.za or via integrand.co.za.

2. Our commitment

Integrand BI is committed to handling personal information responsibly and in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA). We collect only what we need, use it only for the purpose it was given, and do not sell or share it with third parties for their own commercial purposes.

3. Information we collect through this website

Enquiries and contact forms

If you contact us via a form or by email, we collect your name, email address, and the content of your message. This information is used solely to respond to your enquiry and, where a business relationship follows, to maintain records of that engagement.

Website analytics

Our website uses Vercel Analytics to collect anonymous data about how visitors use the site. This may include pages visited, time spent on the site, approximate geographic location, device type, and referral source. This data is aggregated and does not identify you personally. Vercel Analytics is governed by Vercel's own privacy policy, available at vercel.com/legal/privacy-policy.

Cookies

Our website is hosted on Vercel. Vercel sets only the cookies necessary for the site to function and to support anonymous analytics. These cookies do not identify you personally. For full details, refer to Vercel's privacy policy at vercel.com/legal/privacy-policy.

Email correspondence

Any email you send to an Integrand BI address is retained for the duration of our business relationship and for a reasonable period thereafter for record-keeping purposes.

4. How we use your information

DataPurposeLegal basis under POPIA
Contact form submissionsTo respond to your enquiryLegitimate interest
Email correspondenceTo manage the business relationshipLegitimate interest / contractual necessity
Analytics dataTo understand website usage and improve contentLegitimate interest

We do not use your personal information for unsolicited marketing without your consent.

5. Data sharing and third-party processors

We do not sell your personal information. We do not share it with third parties for their own marketing purposes.

We use the following third-party services that may process data on our behalf:

6. The Integrand BI Marketing Agent

Integrand BI operates an internal LinkedIn content automation tool that uses the LinkedIn API and the Anthropic Claude API to draft and publish content to our LinkedIn profile. This tool is for internal use only.

It does not collect, store, or process personal data belonging to website visitors or clients. The only data it processes is content created by Integrand BI for LinkedIn publication.

Third-party services used by this tool:

7. Data retention

We retain personal information only for as long as necessary:

  • Enquiry data where no engagement follows: up to 12 months

  • Client correspondence and project records: for the duration of the relationship and up to five years thereafter, in line with standard business record-keeping practice

  • Analytics data: governed by the retention settings of Vercel Analytics

8. Your rights under POPIA

As a South African resident, you have the right to:

  • Request access to the personal information we hold about you

  • Request correction of inaccurate information

  • Request deletion of your information, subject to any legal retention obligations

  • Object to processing based on legitimate interest

You may also lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za.

To exercise any of these rights, contact us at info@integrand.co.za.

9. Security

Security is a high priority at Integrand, not an afterthought. We operate under a Microsoft 365 Business Premium licence, which gives us access to the full Microsoft Defender suite across all business devices. All devices used in the delivery of our services are enrolled, managed, and encrypted through Microsoft's device management platform.

API credentials and access tokens used in our automated systems are stored in Microsoft Azure Key Vault. We apply the principle of least privilege to all system integrations, and access controls are reviewed regularly.

While no method of transmission over the internet is completely secure, we maintain these technical and organisational measures to ensure that personal information is protected against unauthorised access, loss, or disclosure — and we continuously evaluate and improve our security posture as threats and best practices evolve.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of this website after any changes constitutes acceptance of the updated policy.