Privacy Policy

Last updated: 26 October 2026

This policy explains what personal information Saucecode collects through saucecode.tech, why we collect it, who we share it with, and the rights you have. We follow the Protection of Personal Information Act, 2013 (POPIA).

1. Who we are

Saucecode (“we”, “us”) is based in Randburg, Gauteng, South Africa. We are the responsible party for the personal information described here. This policy covers this website only. When we work with you as a client, a written agreement sets out how we handle the information in that work.

2. What we collect and why

When you send us a message

The forms on our booking page ask for your name, email address, company or organisation, and a message. The automation enquiry also asks for your role and your company's size. The press and partnership form asks for a topic. We use this to reply to you, to prepare for a call, and to decide whether we can help.

With each message our server also records your IP address, your browser's user agent and the time you sent it. We use these to spot spam and abuse.

We send you one email to confirm we received your message. We do not add you to a mailing list, and we will not send you marketing email unless you ask for it.

When you book a call

Our booking calendar is provided by Cal.com. When you book, you give Cal.com your name, email address, the time you choose and any notes you add. Cal.com shares the booking with us, and we add the members of our team who will join the call. If a call is booked with too little notice, our system may cancel it automatically and Cal.com will tell you.

When you browse the site

We use PostHog to understand how people use the site. It records the pages you view, the buttons and links you click, when you start or send a form and whether it went through, how far you scroll through articles, and when you leave a page. It also receives your browser and device type, the page that referred you, and your IP address, from which it may work out an approximate location. It does not record what you type into the forms.

If you send us a message, we link that browsing record to your email address and role, so we can see which pages led to your enquiry.

Our web server keeps standard logs of each request: IP address, time, the page requested and browser details. We use them to keep the site secure and to fix faults.

When you play a video

Videos on the site do not load until you press play. Pressing play loads the player from YouTube (in its privacy enhanced mode) or Google Drive, and Google then receives your IP address and may set its own cookies. Where a video is hosted on YouTube, its preview image loads from YouTube's image server when that part of the page is shown, which also shares your IP address with Google.

3. Our lawful basis

We process your personal information because:

• you asked us to, by sending a message or booking a call, and we need it to respond or to take steps toward working together;
• we have a legitimate interest in running a secure website, understanding how it is used, and improving it; and
• the law requires us to keep certain records.

You can object to processing based on our legitimate interests. See section 8.

4. Cookies and local storage

PostHog stores a random identifier in a first party cookie and in your browser's local storage. This lets it recognise your browser between visits. The cookie lasts up to a year. We do not use advertising cookies.

Cal.com sets its own cookies inside the booking calendar, and Google may set cookies once you play a video. Those cookies are governed by their policies.

You can block or delete cookies and local storage in your browser settings. The site still works without them.

5. Who we share it with

We do not sell your personal information. We share it only with the operators that run parts of the site for us, and only for the purposes above:

• DigitalOcean hosts the website and its server logs.
• Mailgun sends the form messages to our team and your confirmation email.
• Our business email provider stores the messages in our inboxes.
• PostHog provides the site analytics.
• Cal.com runs the booking calendar.
• Google (YouTube and Google Drive) plays videos, only when you press play.

Our content management system, Sanity, holds the site's articles and pages. It does not store anything you send us.

We may also disclose information where the law requires it, or to protect our rights or the safety of others.

6. Transfers outside South Africa

Our providers store and process information outside South Africa, in the United States and the European Union. We use providers that are bound by agreements or by laws that protect personal information to a standard similar to POPIA. Some transfers are also needed to give you what you asked for, such as booking a call.

7. How long we keep it

• Messages and booking details: for as long as we are in contact with you, and up to two years after our last contact, unless we go on to work together or the law requires us to keep them longer.
• Analytics data: up to two years.
• Server logs: up to 90 days.

After that we delete the information or remove anything that identifies you.

8. Your rights

Under POPIA you can:

• ask whether we hold personal information about you;
• ask for a copy of it and a list of who has received it;
• ask us to correct information that is wrong or out of date;
• ask us to delete information we no longer have a reason to keep;
• object to processing based on our legitimate interests, including analytics;
• withdraw consent where you gave it; and
• complain to the Information Regulator.

To use any of these rights, email us at the address in section 11. We may ask you to confirm who you are before we act. We will respond as soon as we reasonably can, and within 30 days where we can.

9. How we protect it

The site is served over an encrypted connection. Access to messages, bookings, analytics and the server is limited to the people at Saucecode who need it. Our providers keep their own security controls. If we learn that your personal information has been accessed without authority, we will tell you and the Information Regulator as POPIA requires.

10. Children

This site is meant for businesses. It is not aimed at anyone under 18, and we do not knowingly collect their information.

11. Information Officer and contact

Our Information Officer handles privacy questions and requests. Email hello@saucecode.tech with “Privacy” in the subject line.

12. Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Regulator of South Africa at inforegulator.org.za.

13. Changes to this policy

We will update this policy when the site or the law changes. The date at the top shows when it last changed. If a change affects how we use information you have already given us, we will tell you before it takes effect.