Privacy Policy

IronGate Digital (Pty) Ltd, trading as SmartLink, determines why and how personal information is processed for the SmartLink platform. Privacy enquiries may be sent to admin@getsmartlink.app.

• Account information such as name, email address, password hash, verification status, communication preferences and account identifiers.
• Business and SmartProfile information, including contact details, addresses, service areas, opening hours, products, services, media, reviews and brand preferences.
• SmartLink and SmartPage activity, including links, pages, drafts, roles, approvals, transfers, subscriptions and support history.
• Technical information such as IP address, device/browser information, timestamps, security logs and basic usage or analytics events.
• Payment and transaction information such as provider reference, status, amount, currency, package, subscription token and timestamps. Full card details are entered with the payment provider and are not stored by SmartLink.
• Communications, enquiries, complaints, instructions and evidence you send to us.

• Create and secure accounts, verify email and authenticate users.
• Provide, build, publish, manage and support SmartLink services.
• Process orders, quotations, approvals, payments, refunds, subscriptions and disputes.
• Prevent fraud, abuse, security incidents and unauthorised access.
• Communicate service, account, legal and support messages.
• Send optional marketing or product communication where you have chosen to receive it.
• Improve product reliability, user experience and business operations.
• Meet legal, regulatory, tax, accounting, payment-provider and law-enforcement obligations.

We process personal information where needed to perform a contract, take requested pre-contract steps, comply with law, protect legitimate interests such as security and service improvement, or where valid consent is appropriate. We process only information that is reasonably relevant to the stated purpose.

We may share limited information with service providers acting for us, including hosting, database, email, analytics, storage, security, support and payment providers. PayFast processes payment information under its own legal and privacy terms. We may also disclose information where required by law, to protect rights or safety, during a properly managed business transaction, or with your instruction or consent.

Some service providers may process or store information outside South Africa. Where this occurs, we take reasonable steps to use providers and arrangements that support appropriate protection consistent with POPIA.

SmartLink may use essential cookies, browser storage and similar technology for login, security, draft recovery, preferences and product operation. We may add optional analytics or marketing technologies only with appropriate notice and controls where required.

We keep personal information only for as long as reasonably needed for the service, contract, legitimate business purpose, dispute, security, tax or legal obligation. Drafts and account data may be deleted or de-identified after applicable retention periods. Backup copies may persist for a limited period before routine deletion.

We use reasonable technical and organisational safeguards appropriate to the information and risks involved, including access controls, authentication, restricted secrets, logging and secure provider connections. No internet service can guarantee absolute security. Please contact us promptly if you suspect account compromise.

Subject to applicable law, you may ask whether we hold personal information about you, request access or correction, object to certain processing, withdraw consent where processing depends on consent, or request deletion where there is no lawful reason to retain the information. We may need to verify your identity before acting.

Closing a SmartLink account is separate from cancelling a paid subscription. Before an account can be closed, active subscriptions, SmartPage ownership, pending transfers, shared access and unfinished service workflows may need to be resolved. After closure, we delete or de-identify personal information that we no longer have a lawful reason to retain. We may retain restricted transaction, tax, accounting, fraud-prevention, security, dispute or legal records for the period reasonably required by law or legitimate record-keeping duties. Retained information is not kept for ordinary marketing use.

Essential account, security, billing, legal and service-delivery messages may still be sent while necessary to operate your account or services. Optional marketing and product-update messages can be turned on or off through your Account & Privacy controls where available.

Information you choose to publish on a SmartPage, SmartAd, business profile or public SmartLink is visible to visitors and may be indexed, shared or copied by others. Do not publish private information you do not want made public. Private drafts and reviews are access-controlled until published or shared through the relevant workflow.

SmartLink business services are not intended for independent use by children who cannot lawfully consent or contract. A parent, guardian or authorised adult must manage any relevant account or submission.

Contact us first through the Contact and Complaints page. You may also approach the Information Regulator of South Africa where entitled.

We may update this policy when products, providers or legal requirements change. Material changes will be communicated where reasonably necessary.