1. Who we are
Go Implement ("we", "us", "our") digitises manual business processes for South African SMEs and mid-market businesses using custom software, SaaS platforms, and AI. This policy explains how we collect, use, store, and protect personal information in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA).
We are the "responsible party" as defined by POPIA for the personal information described in this policy. If you have any questions about this policy or how your information is handled, contact us at privacy@goimplement.co.za.
2. What information we collect
We collect personal information directly from you when you interact with our website or engage us for services. We do not collect special personal information (such as health, biometric, or religious data) through our website.
Information you provide via our contact form
| Field | Purpose |
|---|
| First and last name | To identify and address you correctly |
| Work email address | To respond to your enquiry |
| Company name | To understand your business context |
| Company size | To scope a relevant response |
| Description of your business challenge | To assess fit and prepare for a discovery call |
| Consent selections and timestamp | To record a lawful basis for processing, as required by POPIA |
Information collected automatically
Our website hosting provider (Vercel) may log standard technical information such as IP address, browser type, and access times for security and performance purposes. The analytics and advertising services we run on this website, and the information they collect, are listed in Section 9.
Information collected during a client engagement
If you become a client, we may collect additional information necessary to deliver the engagement, for example, business process documentation, system access credentials (handled under separate confidentiality terms), and billing details. This is governed by your specific services agreement in addition to this policy.
3. Why we collect and use your information
We process personal information only for the specific, lawful purposes set out below:
- To respond to enquiries submitted through our contact form and to schedule discovery calls;
- To assess whether we are a good fit for your business needs;
- To deliver, manage, and invoice client engagements;
- To send marketing communications, insights, or case studies, only where you have separately opted in;
- To maintain records required for accounting, tax, and legal compliance;
- To keep our systems secure and to detect or prevent fraud or abuse.
We do not sell, rent, or trade your personal information to third parties.
4. Consent
Our contact form records your consent, together with an ISO-format timestamp, at the moment you submit the form:
- Contact & processing consent (required): permission to contact you about your enquiry and to store and process your details for that purpose, in line with POPIA and this policy.
- Marketing consent (optional): permission to send you occasional insights, case studies, or relevant content. This is never required to submit an enquiry.
You may withdraw any consent at any time, see Section 8 for how.
5. Who we share your information with
We use a small number of trusted service providers ("operators", as defined by POPIA) to run our business. Each is contractually required to process personal information only on our instructions and to apply appropriate security safeguards.
| Provider | Role |
|---|
| monday.com | Customer relationship management, stores lead and project records |
| n8n (self-hosted on PikaPods) | Automation, routes form submissions from our website into our CRM |
| Vercel | Website hosting |
| Google (Analytics and Ads) | Website analytics and advertising measurement, see Section 9 |
| Cal.com | Scheduling, processes your name and email address when you book a call |
Some of these providers may process or store data on servers located outside South Africa. Where this occurs, we rely on the provider's contractual and technical safeguards to ensure a level of protection consistent with POPIA's requirements for cross-border transfers.
We will only disclose personal information to other third parties where required by law, to protect our legal rights, or with your explicit consent.
6. Storage and security
We apply reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration, or disclosure, including:
- Encrypted transmission (HTTPS) for all data submitted via our website;
- Access to CRM and automation systems restricted to authorised personnel only;
- Regular review of third-party providers' security practices;
- Data minimisation. We only collect what is needed for the stated purpose.
No system is completely secure. If we become aware of a data breach that is likely to compromise your personal information, we will notify the Information Regulator and affected individuals as required under POPIA.
7. How long we keep your information
We retain personal information only for as long as necessary to fulfil the purpose it was collected for, or as required by law:
- Enquiries that don't convert to a client engagement: retained for up to 24 months, then deleted or anonymised.
- Client records: retained for the duration of the engagement plus 5 years, in line with standard South African tax and accounting record-keeping requirements.
- Marketing consent records: retained until you withdraw consent or unsubscribe.
8. Your rights under POPIA
As a data subject, you have the right to:
- Be informed that your personal information is being collected and for what purpose;
- Access the personal information we hold about you;
- Request correction or deletion of inaccurate, irrelevant, excessive, or unlawfully obtained information;
- Object to the processing of your personal information, including for direct marketing purposes;
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
- Lodge a complaint with the Information Regulator (South Africa) if you believe your information has been mishandled.
To exercise any of these rights
Email privacy@goimplement.co.za with your request. We will respond within a reasonable timeframe and, in any event, within the timeframes required by POPIA.
You can also contact the Information Regulator directly:
Email: complaints.IR@justice.gov.za · Website: inforegulator.org.za
9. Cookies and tracking
Our website uses a small number of third-party services that set cookies or receive technical information when a page loads. They are listed below.
| Service | What it does | Cookies |
|---|
Google Analytics 4
G-4801Q8QETN |
Measures how visitors reach and use the site: pages viewed, referral source, device and browser type, approximate location derived from your IP address, and interactions such as scrolling. We use it to understand which pages are useful. |
Sets first-party _ga and _ga_* cookies to tell returning visitors apart. |
Google Ads
AW-18427529889 |
Measures which advertising leads to an enquiry or a booking. Ad personalisation and remarketing are switched off on this tag, so your visit is not used to build advertising audiences or to show you ads elsewhere afterwards. |
Sets a first-party _gcl_au cookie to connect an ad click to a conversion. |
| Cal.com |
Powers the booking widget. If you book a call, the name, email address and any details you enter are processed by Cal.com to create the appointment. |
Sets cookies when you open the booking widget. |
| Google Fonts |
Serves the typefaces the site is built with. Your IP address is disclosed to Google in order to deliver these files. |
None. |
| Vercel |
Website hosting. |
May set strictly necessary technical cookies required for the site to function and to protect against abuse. |
We do not run remarketing or retargeting campaigns. Our Google tags are configured to send a non-personalised signal on every request, which tells Google not to use your visit for ad personalisation or to add you to an advertising audience.
The analytics and advertising cookies above are set when the page loads. You can prevent or remove them at any time: block or delete cookies in your browser settings, install Google's Analytics opt-out browser add-on, or turn off ad personalisation in your Google Ad Centre. Doing so will not affect your ability to use this website, submit the contact form, or book a call.
Google LLC and Cal.com process this data outside South Africa. Section 5 explains how we approach cross-border transfers. If we add or remove a tracking service, we will update this section.
10. Children's information
Our website and services are intended for business use by adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page will always reflect the most recent revision. Material changes affecting how we use previously collected information will be communicated directly where practical.