POPIA notice
1. Who is responsible
Creativ360 (Pty) Ltd trading as Guildwise HQ, registration number 2018/313314/07, 43 Malva Street, Dana Bay, Mossel Bay, Western Cape, South Africa, is the responsible party for personal information we hold about account holders, visitors and people who write to us. For the content a customer puts into its own organization we act as an operator for that customer.
2. Information Officer
Information Officer: Pieter Jordaan. E-mail: [email protected]. You can also use Contact us.
3. What we process and why
- Account details (name, e-mail address, password hash, role): to create and run your account and secure it.
- Activity in the service (the event log, sign-ins, approvals): to give you an audit trail, to keep the service secure and to support you.
- Billing information (plan, invoices, Paystack token reference, card brand, last four digits): to charge for the subscription and keep tax records.
- Messages you send us (support tickets, contact forms): to answer you.
- Service e-mail (invitations, notices, optional weekly briefings): to run the service. Briefings can be switched off in your profile settings.
4. Lawful basis
We process information because it is needed to carry out our agreement with you or your organization, because the law requires it (for example tax records), and because we have a legitimate interest in keeping the service secure and improving it. Where we rely on your consent, you can withdraw it at any time.
5. Who receives it
Service providers that run the service on our instructions: hosting (Namecheap), e-mail (SendGrid), payments (Paystack) and a model provider (Anthropic). The full list is on the Trust page. We do not sell personal information.
6. Transfers outside South Africa
Our servers and database are hosted by Namecheap in Phoenix, Arizona, United States, so the personal information we hold is transferred to the United States. Other providers (e-mail, payments, model provider) may also process information outside South Africa. We transfer personal information only where the recipient is bound by law, binding rules or an agreement that gives substantially similar protection, as section 72 of POPIA requires, or with your consent or where it is necessary to carry out our agreement with you. The safeguards are written agreements with each provider that limit processing to our instructions and require confidentiality and security, encryption in transit, encryption of sensitive secrets at rest, strict separation between organizations, and the audit trail. Source code and secrets of your projects stay on your own workstation. Ask the Information Officer for details of the safeguards for a specific provider.
7. Your rights
You can ask us to confirm whether we hold your personal information and to give you a copy, to correct or delete it, and to object to its processing or to direct marketing. You can withdraw consent at any time. Write to the Information Officer or use Contact us. The Privacy policy explains retention and security in more detail.
8. Complaints
If you are not satisfied, you may complain to the Information Regulator (South Africa): JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001. General enquiries: [email protected]. Complaints: [email protected]. Website: inforegulator.org.za. We would appreciate the chance to put things right first.