Privacy Policy

01Who is responsible for your information

Mollo Innovations (Pty) Ltd, registration number 2026/275132/07, of Regus Business Centre, 1st Floor, Block B, North Park, Black River Park, 2 Fir Street, Observatory, Cape Town, Western Cape, 7925, South Africa.

For information collected through this website we are the "responsible party" as the Protection of Personal Information Act 4 of 2013 (POPIA) uses that term — we decide why and how it is processed.

When we build or run software for a client, we usually act as an "operator" instead: we process personal information on that client’s instruction, and that client is the responsible party. This policy covers our own website. What happens inside a system we built for a client is governed by that client’s privacy policy and by our written agreement with them.

02Information Officer

Under POPIA the head of a private body is its Information Officer. Ours can be reached at hello@molloinnovations.com, or by post at Regus Business Centre, 1st Floor, Block B, North Park, Black River Park, 2 Fir Street, Observatory, Cape Town, Western Cape, 7925, South Africa, marked for the attention of the Information Officer.

Send any request about your personal information, or any complaint about how we have handled it, to that address.

03What we collect

Through this website: nothing. There is no contact form, no sign-up, no account and no field to type into. Browsing the site gives us no personal information about you at all.

Our hosting provider, Cloudflare, processes technical information — including your IP address — as part of delivering the site and protecting it from abuse. We do not see that as a profile of you, we do not build one, and we have nothing to combine it with.

If you choose to email us, we hold what you send: your name and email address as they appear on the message, anything you tell us about yourself or your business, and the content of the message itself. That is entirely your choice and entirely in your control — nothing on this site asks you for it.

We do not knowingly collect special personal information as POPIA defines it (things such as health, religious or political beliefs, race, or trade union membership), and we do not ask for it. Please do not email it to us either.

04What we do not do

This site is built so that the following are true rather than merely promised:

• no analytics, no tag manager, no advertising or tracking pixels
• no cookies of any kind, so there is no cookie banner to accept
• fonts are served from this domain, not from a third-party font CDN
• no social media embeds, no live chat widget, no session recording
• no contact form, so nothing you type is captured anywhere
• we do not sell, rent or trade personal information — ever, to anyone
• we do not use what you send us to train AI models

05Why we use it, and on what legal basis

We use what you email us to read your enquiry, reply to it, and have whatever follow-up conversation it leads to. If it turns into work, we keep it as part of the record of how that engagement started.

Our lawful basis under POPIA is section 11(1)(b) — the processing is necessary to take steps at your request before entering into a contract — and section 11(1)(f), our legitimate interest in answering people who ask us to.

Contacting us is entirely voluntary, and nothing on this site requires it. You decide what to put in the email. The only consequence of telling us less is that we may not be able to answer properly — nothing else turns on it.

We will not use your details for anything else without asking you first.

06Marketing

We do not run a mailing list and we do not send marketing email.

If that ever changes, section 69 of POPIA means we would need your consent before sending you electronic direct marketing, and we would ask for it separately and plainly. Replying to your enquiry is not marketing, and neither is an email about work we are already doing for you.

07AI, and what we do not put into it

We use AI tooling in how we design and build software. That is part of what we sell.

We do not paste the contents of your email into a public AI service, we do not use it as training data, and no automated system makes a decision about you. Every message is read by a person and replied to by a person.

08Who else sees it

As few parties as possible. Specifically:

• Cloudflare, Inc. — hosts this site and delivers it
• Google (Workspace) — hosts the mailbox our email arrives in

Each of these is an "operator" as POPIA uses that term: it processes the information only to provide that service to us, under a written contract that requires it to keep the information secure, as section 21 of POPIA requires. We do not give anyone your details for their own marketing.

We may also disclose information where the law requires it, or where it is necessary to establish or defend a legal claim.

09Where it goes

The providers above operate outside South Africa, so your information is processed in other countries, including the United States and the European Union.

Section 72(1)(a) of POPIA permits this where the recipient is bound by an agreement that gives an adequate level of protection — one upholding principles substantially similar to POPIA’s conditions for lawful processing, and restricting onward transfer in substantially similar terms. We rely on the data processing agreement and standard contractual clauses each provider is bound by.

South Africa has no list of countries pre-approved as adequate, so the protection here comes from those contracts rather than from the destination country’s law.

10How long we keep it

Emails that do not lead to work: we keep them for up to 24 months, then delete them. That window exists because conversations often restart months later.

Emails that lead to work: we keep them as part of that engagement’s record, for as long as company and tax law require us to keep business records, and then delete them.

You can ask us to delete yours sooner. See your rights below.

11How we protect it

The site is served over HTTPS. It has no forms, no database and no login, so there is no store of personal information attached to it to protect, and nothing for an attacker to take from it.

What you email us lives in our mailbox. Access to it is limited to people at Mollo who need it, and is protected by multi-factor authentication.

No system is perfectly secure. If a breach affects your personal information, POPIA requires us to notify you and the Information Regulator, and we will.

12Your rights

Under POPIA you have the right to:

• be told that we are collecting your personal information, and be told if it is ever accessed by an unauthorised person
• ask whether we hold personal information about you, and ask for a copy of it
• ask us to correct or delete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully
• object, on reasonable grounds, to us processing your information
• object at any time to receiving electronic direct marketing
• not be subject to a decision made solely by automated means that affects you significantly — we make none
• complain to the Information Regulator, and to go to court

To exercise any of these, email hello@molloinnovations.com. We will confirm we have your request, and respond within 30 days. There is no charge for making one, though POPIA allows a prescribed fee for providing a copy of information we hold — we will tell you before any fee applies.

We may need to confirm who you are before acting on a request, so that we do not disclose your information to someone else.

13Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect personal information about anyone under 18. If you believe a child has sent us information, tell us and we will delete it.

14Complaints

Please raise it with us first, at hello@molloinnovations.com — most things are fastest to fix directly.

You also have the right to complain to the regulator at any time:

Regulator

Information Regulator (South Africa)

Address

JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

Complaints

complaints.IR@justice.gov.za

General enquiries

enquiries@inforegulator.org.za

Website

https://inforegulator.org.za

15Changes to this policy

If we change this policy, the version in force is the one published here and the date at the top tells you when it took effect. If a change is significant, and we hold your contact details, we will tell you.

16Contact us

Email hello@molloinnovations.com, or write to the Information Officer at Regus Business Centre, 1st Floor, Block B, North Park, Black River Park, 2 Fir Street, Observatory, Cape Town, Western Cape, 7925, South Africa.