Privacy Policy

1. Introduction

FAHZY ("we", "us", or "our") operates a business management platform that uses the WhatsApp Business Cloud API and Meta advertising services to communicate with leads and clients. This Privacy Policy explains how we collect, use, store and protect personal information in connection with these services.

By interacting with us via WhatsApp or submitting your information through our website (www.fahzy.co.za), you agree to the practices described in this policy.

2. Who We Are

FAHZY is a South African business providing software development and digital engineering services. We use the WhatsApp Business Cloud API (provided by Meta Platforms, Inc.) to communicate with prospective and existing clients.

Contact us at:
Email: sales@fahzy.co.za
Website: www.fahzy.co.za

3. Information We Collect

We may collect the following categories of personal information:

• Identity and contact data: Your first name, last name, email address and phone number, provided when you submit an enquiry or contact us.
• WhatsApp message content: The content of messages exchanged between you and FAHZY via WhatsApp, including text messages and any media you voluntarily send to us.
• Enquiry details: Project descriptions, budget ranges, timelines and other information you share with us when requesting our services.
• Communication history: Records of when messages were sent, delivered and read, as reported by the WhatsApp Business Cloud API.
• Technical data: We use Google Analytics 4 to collect anonymised data about how visitors interact with our website. This includes page views, session duration, referral source and general device and browser information. Google Analytics sets cookies (such as _ga and _gid) in your browser to distinguish visitors and track sessions across pages. Google Analytics 4 does not log or store full IP addresses. Where you consent (via our cookie banner), we also measure the effectiveness of our Google Ads and Meta advertising, as described below. You can decline advertising cookies at any time using the banner.
• Ad attribution data: If you arrive at our website by clicking a paid advertisement (such as a Google Ads or Meta Ads campaign), your browser URL may contain tracking parameters including UTM tags (utm_source, utm_medium, utm_campaign) and platform-specific click identifiers (Google's gclid and Meta's fbclid). We read these parameters from your URL and, if you subsequently submit an enquiry through our contact form, we store them alongside your enquiry to understand which advertising sources generate leads. These parameters are held in your browser's local storage for up to 90 days so that a return visit can still be attributed to the ad that first brought you here. They are never used to track you across other, unrelated websites.

We do not collect sensitive personal information such as national identity numbers, financial account credentials, health data or biometric data.

4. How We Use Your Information

We use your personal information for the following purposes:

• Responding to enquiries and providing quotations for our services.
• Communicating with you via WhatsApp to discuss project requirements, updates and follow-ups.
• Managing our client and lead database to provide timely responses.
• Sending approved WhatsApp message templates (such as introduction messages) when you have expressed interest in our services.
• Improving our service quality and internal processes.
• Measuring the effectiveness of our paid advertising campaigns by attributing enquiries to the ad source, medium or campaign that brought you to our website. This helps us understand which advertisements generate genuine business interest.
• Complying with applicable legal obligations and resolving any disputes.

We do not sell, rent or share your personal information with third parties for their own marketing purposes.

5. WhatsApp Business Cloud API

We use the WhatsApp Business Cloud API provided by Meta Platforms, Inc. to send and receive WhatsApp messages. When you message us on WhatsApp or when we send you a WhatsApp message:

• Your phone number and the content of your messages are transmitted through Meta's infrastructure and stored in our secure database.
• Meta processes message data as a data processor on our behalf, in accordance with Meta's own data policies and the WhatsApp Business Terms of Service.
• We only send WhatsApp messages to individuals who have contacted us first or who have consented to receiving communications from us.
• You can opt out of WhatsApp communications from us at any time by replying STOP to any message from us. We will immediately honour your request and cease all WhatsApp contact. You can resume communications at any time by replying START.

For more information on how Meta handles data, please refer to the WhatsApp Privacy Policy and the Meta Privacy Policy.

6. How We Store Your Information

Your personal information is stored securely in cloud databases hosted on servers located in South Africa. We implement appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss or destruction.

Access to your data is restricted to authorised FAHZY personnel only, protected by authentication tokens and encrypted communications (HTTPS/TLS).

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law, and no longer than 3 years after our last interaction with you unless you request earlier deletion.

7. Third-Party Services

We use the following third-party services that may process your personal data:

• Meta Platforms, Inc. (WhatsApp Business Cloud API) for sending and receiving WhatsApp messages.
• Amazon Web Services, Inc. (AWS) for cloud infrastructure and storage services, hosted in South Africa.
• Google LLC (Google Analytics 4) for anonymised website usage analytics. Google Analytics collects usage data via cookies and may transfer and store that data on servers outside South Africa. Google Analytics 4 anonymises IP addresses and does not store full IP addresses. You can opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-out Browser Add-on or by clearing and blocking cookies in your browser settings. For more information see Google's Privacy Policy.
• Google LLC (Google Ads) for paid search advertising. When you click one of our Google Ads, Google appends a click identifier (gclid) to the URL. If you submit an enquiry, this identifier is stored with your lead record solely to measure whether our ads generate enquiries. We share conversion events (enquiry submitted) back to Google Ads to enable campaign optimisation. No personal information beyond the conversion signal is shared. For more information see Google's Privacy Policy.
• Meta Platforms, Inc. (Meta Ads — Facebook & Instagram) for paid social advertising. When you click one of our Meta ads, Meta appends a click identifier (fbclid) to the URL. If you submit an enquiry, this identifier is stored with your lead record solely to measure ad effectiveness. We share conversion events with Meta to enable campaign optimisation. No personal information beyond the conversion signal is shared. For more information see the Meta Privacy Policy.

Each of these providers operates under their own privacy policies and data processing agreements. We do not authorise these providers to use your data for their own independent purposes beyond what is necessary to provide their services to us.

8. Your Rights

Under applicable data protection law (including South Africa's Protection of Personal Information Act (POPIA)), you have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to our legal obligations.
• Objection: Object to our processing of your personal information for marketing or communication purposes.
• Opt out of WhatsApp messages: Reply STOP to any WhatsApp message from us, or contact us directly to be removed from our communication list.
• Opt out of Google Analytics: Install the Google Analytics Opt-out Browser Add-on or clear and block cookies in your browser settings to prevent your visit data from being collected.

To exercise any of these rights, please contact us at sales@fahzy.co.za. We will respond within 30 days.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Versions published from September 2026 onwards are archived and available on request. Continued use of our services after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us: