Privacy Policy

Sixees Labs (Pty) Ltd ("Sixees Labs", "we", "us", or "our") operates the website at sixeeslabs.com (the "Website"). This Privacy Policy explains how we collect, use, and safeguard information about visitors to the Website.

Scope of this policy. This policy applies only to information collected through the Website itself — for example, your browsing activity, cookies, and information you submit through forms on sixeeslabs.com. It does not cover the products and services we offer (such as ConfluxIQ, Babel Shield, or any consulting engagement). Each product has its own privacy notice and contractual terms that govern how Personal Information is processed when you use that product.

Sixees Labs is committed to processing Personal Information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA"). Where Website visitors are located in the European Economic Area or the United Kingdom, we will also act in good faith consistent with the General Data Protection Regulation (GDPR).

If you have questions about this policy, please contact our Information Officer using the details in Section 12.

1. Introduction

See above.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you choose to give us through forms on the Website, such as:

• Contact and enquiry forms — your name, email address, organisation, role or job title, telephone number (if provided), and the content of your message.
• Demo and call requests — the same details as above plus any context you provide about your interest in our products or services.
• Newsletter sign-up — your email address and, optionally, your name and organisation.
• Event and webinar registrations — your name, email address, organisation, role, and any preferences you indicate.
• Job applications and expressions of interest — your name, contact details, CV / résumé, and any supporting information you provide.

Providing the information requested in the forms above is voluntary. There is no statutory or contractual obligation to submit any of the forms on this Website; you choose whether to do so and what to include. If you choose not to provide the requested information, we will not be able to respond to your enquiry, send you the materials or demos you have requested, register you for an event, deliver newsletters to you, or consider your job application — depending on which form you have used.

2.2 Information Collected Automatically

When you visit the Website, we and our service providers automatically collect:

• Usage data — pages visited, links clicked, time spent on the site, referring URLs, and exit pages.
• Device and browser data — IP address, browser type and version, operating system, device type, and screen resolution.
• Cookies and similar technologies — see Section 6 for details.
• Server logs — standard request logs that include the date and time of access, the URLs requested, and the response codes returned.

2.3 Information from Third Parties

If you choose to interact with our content on third-party platforms (for example, by following a link from LinkedIn, X, or a search engine), that platform may share limited information with us, such as basic profile data or referral context, in accordance with its own privacy policy and your settings on that platform.

3. How We Use Your Information

• Responding to enquiries — to read, triage, and respond to messages and requests you send us.
• Providing information you request — to send you demos, brochures, pricing information, newsletters, event details, or similar materials you have asked for.
• Operating and securing the Website — to keep the Website available, performant, and free from abuse.
• Analytics and improvement — to understand traffic patterns, measure the effectiveness of our content, and improve the Website over time.
• Marketing communications — to send you updates about Sixees Labs, our products, and relevant events, where you have consented. Every marketing email contains an unsubscribe link.
• Recruitment — to assess job applications and expressions of interest.
• Legal and compliance — to comply with our legal obligations and protect our rights.

3.1 Use of AI-Assisted Tools

We may use AI-assisted tools (including large language models from approved third-party AI providers) internally to help triage, summarise, and draft responses to enquiries submitted through the Website. Any use of such tools is governed by our internal Approved AI Tools List and POPIA obligations.

We do not use Personal Information collected through the Website to train Sixees Labs's machine-learning models, and we do not provide it to third-party AI providers for the purpose of training their models. Where AI tools are used to assist with a response, the output is reviewed by a Sixees Labs team member before it is sent.

4. Lawful Basis for Processing (POPIA s.11)

• Consent (s.11(1)(a)) — where you submit a contact form, sign up for our newsletter, or accept non-essential cookies. You may withdraw consent at any time.
• Contract (s.11(1)(b)) — where processing is necessary to take steps at your request before entering into a contract with you.
• Legal obligation (s.11(1)(c)) — where processing is necessary to comply with a law that applies to us.
• Legitimate interest (s.11(3)) — for the legitimate interests of Sixees Labs in operating, securing, analysing, and promoting the Website and our business.

If you are located in the EEA or UK, equivalent lawful bases under GDPR Article 6 apply.

5. How We Share Your Information

We do not sell your Personal Information.

5.1 Service Providers (Operators under POPIA s.20)

We use trusted third-party service providers to help us operate the Website and our business. These include website hosting providers, email and marketing-automation providers, analytics providers, CRM providers, and approved AI-assistance providers. These providers process Personal Information on our behalf, under written agreements that require them to protect the information and use it only for the purposes we have authorised.

5.2 Legal Requirements

We may disclose information where required by law, regulation, court order, or lawful request from a government or regulatory body.

5.3 Business Transfers

If Sixees Labs is involved in a merger, acquisition, or sale of assets, Personal Information may be transferred as part of that transaction. We will take reasonable steps to ensure continuity of protection.

5.4 With Your Consent

We may share your information with other parties where you have given us your explicit consent to do so.

6. Cookies and Tracking Technologies

We use cookies and similar technologies on the Website to:

• Essential cookies — enable core Website functionality (session management and security). These cannot be disabled.
• Analytics cookies — measure traffic and understand how the Website is used so we can improve it.
• Marketing and preference cookies — remember your preferences and, where you have consented, support marketing measurement and optimisation.

You can manage your preferences through your browser settings. For full details see our Cookie Policy.

7. Data Retention

• Enquiry, demo, and call-request data — retained for the duration of our communications with you, and for up to 24 months thereafter.
• Newsletter and marketing data — retained until you unsubscribe, after which we retain a minimal suppression record to honour your opt-out.
• Job applications — retained for the duration of the recruitment process, and for up to 12 months thereafter where you have consented to be considered for future roles.
• Cookie, analytics, and log data — retained in line with the relevant tool's settings, typically in aggregated or pseudonymised form.

When data is no longer needed, we securely delete or anonymise it.

8. Your Rights Under POPIA

• Access — request confirmation of whether we hold Personal Information about you.
• Correction — request correction or deletion of inaccurate, irrelevant, or outdated information.
• Object — object to the processing of your Personal Information on reasonable grounds.
• Withdraw consent — where processing is based on your consent, withdraw that consent at any time.
• Object to direct marketing — object to the processing of your Personal Information for direct marketing purposes.
• Complain to the Information Regulator — see Section 13.

To exercise any of these rights, lodge a data subject request or contact our Information Officer at [email protected].

If you are located in the EEA or UK, equivalent rights under GDPR (including portability and erasure) apply.

9. Data Security

We implement appropriate technical and organisational measures to protect Personal Information, including:

• Encryption of data in transit (TLS)
• Access controls, authentication, and audit logging
• Vendor due-diligence and written agreements with service providers
• Internal POPIA awareness training for staff

No method of transmission over the internet is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

10. Cross-Border Transfers

Sixees Labs is based in South Africa. Some of our service providers may store or process Personal Information outside South Africa. Where we transfer Personal Information outside South Africa, we do so in accordance with POPIA s.72 — that is, where the recipient provides an adequate level of protection or another permitted ground applies.

11. Children's Privacy

The Website is intended for a business audience and is not directed to children. We do not knowingly collect Personal Information from children under the age of 18. If you believe we have inadvertently collected information from a child, please contact us at [email protected] and we will delete it.

13. Right to Lodge a Complaint

If you are not satisfied with how we have handled your Personal Information, you have the right to lodge a complaint with the Information Regulator of South Africa:

• JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
• Email: [email protected]
• Website: inforegulator.org.za

If you are located in the EEA or UK, you also have the right to lodge a complaint with your local data-protection authority.

14. Third-Party Links

The Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those third parties and encourage you to review their privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. Your continued use of the Website after such changes constitutes your acceptance of the updated policy.