Privacy Notice

Last updated: 15 October 2026

1. Who we are

PlusPlusMinus Design and Development CC (registration number 2009/160763/23), trading as PlusPlusMinus ("PPM", "we", "us"), is a software design and development studio at 1289 Val de Vie, Paarl, 7646, South Africa.

We are the responsible party for the personal information this notice describes, under the Protection of Personal Information Act 4 of 2013 (POPIA). Our Information Officer is Adriaan van Niekerk, registered with the Information Regulator (registration number 2026-069267). Our Deputy Information Officer is Sergio Pellegrini.

Questions or requests about your personal information: admin@plusplusminus.co.za

2. Who this notice covers

People who visit plusplusminus.co.za
People who contact us or send us a project enquiry
People who apply to work with us
Our clients' and prospective clients' staff we deal with
Our suppliers' staff we deal with

Our team members are covered by our internal policies, not this notice.

When we build or run a website or app for a client, the client decides how personal information in that product is used, and their privacy notice applies to it. We act as their operator and process that information only on their instructions.

3. What we collect and why

Visiting our website

Pages viewed, approximate location, device and browser type, and how you arrived, through Google Analytics cookies, only if you accept analytics cookies. We use this to understand how the site is used and improve it. Cloudflare Turnstile checks your browser when you use our forms, to protect them from spam and automated abuse.

Project or message form

Your name, email address, company name, company website, and what you tell us about your project. We use it to reply, and to prepare a proposal if you ask for one: steps you asked us to take before a possible contract.

Join form

Your name, email address, what you tell us about yourself, and links to your CV and video. We use it to assess your application and contact you about it: steps you asked us to take before a possible contract.

Working with us as a client or supplier

Names, job titles and work contact details, our correspondence, meeting notes, and invoicing and payment details. We use them to deliver and manage our services and to keep the records the law requires.

Meetings

Recordings and transcripts of video calls, when we record them, to keep an accurate record of what was agreed. We say at the start of a call when we are recording, and you can ask us not to.

We don't ask for special personal information (such as health, religion or biometric information) or information about children, and we ask you not to send it to us.

4. Marketing email

We only send marketing email to existing clients about similar services, or to people who have agreed to receive it. Every marketing email has an unsubscribe link, and you can opt out at any time by replying to it.

5. Who we share it with

Service providers who host or process it for us: website hosting and forms, email and documents, project management, meeting recording, accounting, electronic signatures, and analytics
AI services we use to help write, summarise meetings and develop software. We use them on business terms under which the provider does not use your information to train its models
Professional advisers, such as our lawyers, accountants and insurers
Authorities, when the law requires it

Each service provider is bound by a written agreement to keep the information confidential and secure. We don't sell personal information.

6. Information sent outside South Africa

Most of our service providers store information in the United States or the European Union. We only use providers that are bound by law or by a written agreement to protect it to a standard at least as high as POPIA requires (POPIA section 72).

7. How long we keep it

Enquiries that don't become work: 2 years after our last contact
Job applications: 12 months after the decision, unless you join us or ask us to keep it longer
Client and supplier records, including invoices: 5 years after the engagement ends, as tax and company law requires
Meeting recordings: 12 months
Website analytics: 14 months

After that we delete it or remove anything that identifies you.

8. How we protect it

We limit access to the people who need it, require strong authentication on our accounts, encrypt information in transit and on our devices, and have a procedure for responding to security incidents, including telling you and the Information Regulator when the law requires it. Our PAIA Manual describes these measures in more detail.

9. Your rights

You can ask us to:

tell you whether we hold personal information about you, and give you a copy
correct or update it
delete it, where we no longer have a reason to keep it
stop using it, including for marketing
withdraw your consent, where we rely on it

Send your request to admin@plusplusminus.co.za. We may ask you to confirm your identity first. We'll respond within 30 days.

If you're not happy with how we handle your information, please tell us first so we can put it right. You can also complain to the Information Regulator, JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001, enquiries@inforegulator.org.za, inforegulator.org.za.

If you're in the UK or the EU

The UK GDPR or EU GDPR may also apply to your information. You can additionally ask us to give you your information in a portable format, or to restrict how we use it. You can complain to your local data protection authority; in the UK, that is the Information Commissioner's Office, ico.org.uk.

10. Cookies

Our website uses Google Analytics cookies to measure visits. They are only set if you accept them in our cookie banner, and you can change your choice at any time. Our forms are protected from spam by Cloudflare Turnstile, which does not use cookies to track you. You can also block or delete cookies in your browser settings.

11. Changes to this notice

We'll update this notice when our use of personal information changes, and change the date at the top.