Privacy policy

Last updated 17 October 2026

This policy explains how Nexa Connect collects, uses and protects personal information, as required by the Protection of Personal Information Act 4 of 2013 (POPIA). It applies to people who visit our website, send us an enquiry, sign up for a card, or have a card published by us.

Who we are

Nexa Connect SA (Pty) Ltd (registration number 2026/837735/07) designs and hosts digital business cards in South Africa. Contact our information officer about anything in this policy at info@nexaconnectsa.co.za or on +27 60 518 6921.

What we collect

Card details: the name, job title, company, phone number, email, address, opening hours, photo, logo, brand colours, social media and website links, Google review details and any brochure that you, or your employer, give us to publish on your card.
Sign-up and enquiry details: what you send us through our forms, WhatsApp or email, including any notes and files.
Account and billing details: the package you chose and the details we need to invoice you.
Consent records: when and how you agreed to your card being published.
Details left on a card: if you use the "Leave your details" button on someone's card, we keep the name, number and message you send, the date, and that you agreed. We send them to the card's owner by email so they can get back to you.
Card opens: the date and how a card was opened (link or QR code). We don't record who opened it, their IP address or their device.
Technical information: our hosting providers keep short-term server logs, including IP addresses, to keep the service secure. Our pages load fonts from Google Fonts and a small script from Cloudflare, which receive your IP address when you visit. We use Cloudflare Web Analytics to count page visits. It doesn't use cookies or identify individual visitors.

We don't use advertising or tracking cookies. The only cookie we set keeps our own staff signed in to our admin system.

Why we use it

To design, publish and update the card you asked for, based on your consent and our agreement with you.
To reply to your enquiry and send you your private preview.
To invoice you and keep the financial records the law requires.
To pass on the details you leave on a card to that card's owner, and include them in the owner's monthly report, based on the consent you give when you send them.
To send card owners an email when someone leaves their details, and a monthly report of how often their card was opened.
To keep our service secure and working.

We only use your information for these purposes.

Your consent

We publish a card only after the card holder has agreed, and we record when and how they agreed. You can withdraw your consent at any time. We will take your card offline within 2 working days of your request.

Who can see your card

A published card can be seen by anyone who has its link or QR code. Cards are hidden from search engines, and each card link includes a code so cards can't be found by guessing names. Before publishing, only you and our team can see your card, through a private preview link.

Who we share it with

We never sell personal information or share it for other companies' marketing. We use these service providers to run Nexa Connect, and they process information only on our instructions:

Netlify, Inc. hosts our website and cards.
Supabase, Inc. hosts our database, including card details and uploaded files.
Resend (Plus Five Five, Inc.) sends our emails, including lead alerts and monthly reports.
Google (Google Fonts) and Cloudflare deliver fonts and a script used by our pages. Cloudflare also provides our visit counts.

These providers store information outside South Africa, including in the United States. Under section 72 of POPIA, we only use providers bound by agreements or laws that give your information protection substantially similar to POPIA.

How we protect it

All information travels over encrypted connections (HTTPS).
Only our team can sign in to our admin system, with a password and protection against repeated guessing.
Our database can't be read directly from the internet.
If we become aware of a breach that affects your information, we will tell you and the Information Regulator as POPIA requires.

How long we keep it

Cards: for as long as your subscription is active. When you cancel, we take your card offline straight away and delete its details and files within 30 days.
Enquiries and sign-ups that don't become a card: deleted within 12 months.
Details left on a card: deleted after 12 months, or sooner if the card is deleted. Once emailed, the copy in the card owner's inbox is theirs to look after.
Invoices and payment records: kept for 5 years, as tax law requires.

Information about other people

If you give us someone else's details, for example your staff for team cards, you confirm that they know about it and have agreed to their card being published.

Team cards

When an employer orders cards for its staff, the employer decides what is published and is the responsible party under POPIA. Nexa Connect processes the information on the employer's behalf, as its operator.

Marketing

We only contact you about your enquiry, your card or your account. We won't send you marketing unless you've agreed to it, and you can ask us to stop at any time.

Children

Our service is for adults and businesses. We don't knowingly publish cards for anyone under 18.

Your rights

You can ask us at any time to:

tell you what personal information we hold about you, and give you a copy
correct or update it
delete it, or take your card offline
stop using it, or withdraw your consent

Send your request to info@nexaconnectsa.co.za. We may ask you to confirm your identity first.

Changes to this policy

If we change this policy, we'll update the date at the top of this page. For significant changes, we'll let card holders know.