Privacy Policy & Data Governance

At Toolrealm, we respect your privacy and process personal information strictly in accordance with South Africa’s Protection of Personal Information Act No. 4 of 2013 (POPIA) and international standards such as the General Data Protection Regulation (GDPR).

This Privacy Policy explains how Toolrealm (“we”, “us”, or “our”) handles personal data when you interact with our primary platform (toolrealm.co.za), access curated visual archives on app.toolrealm.co.za, submit project briefs, or subscribe to our agency dispatches. For complete terms governing service delivery, review our Terms of Use.

“We do not monetise, rent, or sell client data. Period. We collect only what is strictly necessary to perform design, build, and engineering work.”

Toolrealm Security Protocol

01 : Information Officer & Responsible Party

For the purposes of POPIA and relevant global compliance regulations, the Responsible Party governing all collected data across Toolrealm digital properties is:

• Entity: Toolrealm
• Physical Address: 40 Padstow Street, Alberton, Gauteng, South Africa
• Information Officer: Toolrealm Compliance Office
• Direct Contact: info@toolrealm.co.za
• WhatsApp Contact: +27 73 824 8808

02 : Personal Information We Collect

We restrict our collection to data necessary for business operations, client project execution, and security verification. This includes:

Directly Provided Information: When you fill out an architectural project brief, submit a form on our agency portfolio page, or request an audit, we process your full name, business email, phone number, company name, and brief details.

Technical & Telemetry Data: When navigating our site, standard server analytics are collected, including anonymised IP addresses, browser engine metrics, operating systems, and page interaction timestamps.

03 : Legal Grounds for Processing (POPIA Compliance)

Every piece of data processed by Toolrealm relies on explicit statutory grounds under Section 11 of POPIA:

• Contractual Necessity: Processing required to quote, build, deliver, or maintain custom web applications and client projects.
• Legitimate Interest: Protecting our web infrastructure against spam, illegal access, and abusive automated bots.
• Explicit Consent: Where you voluntarily opt into email updates, dispatches on our journal insights page, or direct contact workflows.

04 : Third-Party Systems & Data Processors

We do not run ad networks or trade visitor data. We utilize trusted infrastructure operators for form validation, communication dispatches, and website delivery:

• Form Submissions & Dispatch: Web3Forms, Brevo (Automation & Transactional Mailers)
• Messaging Infrastructure: Ably (Real-time updates), Webpushr (Push Notifications)
• Bot Mitigation: Google reCAPTCHA (v3 enterprise verification)
• Hosting & Edge CDN: Cloudflare / AWS CloudFront infrastructure

05 : Statutory Rights & Access Requests

Under Sections 23 and 24 of POPIA, you maintain full control over your stored personal data. You have the statutory right to:

• Access: Request a full copy of all personal record files held by Toolrealm.
• Correction: Mandate the immediate update or correction of outdated or inaccurate information.
• Deletion / Objection: Request the deletion or withdrawal of consent for marketing communications at any time.

To exercise any of these rights, email our Information Officer at info@toolrealm.co.za with the subject line “POPIA Data Subject Request”.