Privacy Policy

Last updated: 9 July 2026

This Privacy Policy explains how Malva Dev ("Malva Dev", "we", "us", or "our") collects, uses, and protects your personal information when you visit malvadev.com or get in touch with us. We are a software development studio based in Gauteng, South Africa. We take your privacy seriously and handle your information in line with the Protection of Personal Information Act, 2013 (POPIA). Where we work with clients in the European Union or United Kingdom, we also apply the standards of the General Data Protection Regulation (GDPR).

Who is responsible for your information

Malva Dev is the responsible party (data controller) for the personal information described here. If you have any questions about this policy or want to exercise your rights, contact us at [email protected]. We are located in Gauteng, South Africa.

What information we collect

We only collect what we need. Depending on how you use the site, that includes:

  • Contact form: your name, email address, an optional phone number, and the message you send us.
  • Resource downloads: if you download one of our checklists or guides, we collect your email address (and name, if you provide it) so we can send you the resource and occasional related content.
  • Booking a call: if you book a discovery call through our scheduler, you provide your name, email, and a short description of your project. This booking is handled by Microsoft Bookings (see "Who we share information with" below).
  • Usage and analytics data: if you allow analytics cookies, we collect anonymised information about how you use the site, such as pages viewed, approximate location, device and browser type, and referring source. See our Cookie Policy for detail.
  • Technical data: our hosting and security provider automatically processes limited technical data such as IP address and request information to keep the site running and secure.

How we use your information

We use your personal information to:

  • respond to your enquiry and communicate with you about a potential or active project;
  • send you a resource you requested, and related content you can opt out of at any time;
  • schedule and manage discovery calls;
  • understand how the site is used so we can improve it;
  • keep the site secure and prevent abuse; and
  • meet our legal and record-keeping obligations.

Our lawful basis

We process your information on the basis of your consent (for example, when you submit a form or accept analytics cookies), our legitimate interest in running and improving our business, and, where relevant, to take steps at your request before entering into a contract. You can withdraw consent at any time.

Who we share information with

We do not sell your personal information. We share it only with service providers who help us run the site and our business, and only as far as they need it. These include:

  • Google (Google Analytics): website analytics, if you consent to analytics cookies.
  • Microsoft (Microsoft 365 and Bookings): email and the scheduling of discovery calls.
  • Cloudflare: content delivery, performance, and security.
  • Our hosting provider: to store the site and its data securely.

Some of these providers are based outside South Africa, so your information may be processed in other countries. Where that happens, we rely on providers that offer an adequate level of protection and appropriate safeguards for cross-border transfers.

How long we keep it

We keep enquiry and contact information for as long as needed to deal with your request and for a reasonable period afterwards for our records. We keep resource-download details until you unsubscribe or ask us to delete them. We keep analytics data for a limited retention period set in our analytics tools. We do not keep personal information for longer than necessary.

How we protect your information

We use reasonable technical and organisational measures to protect your information, including secure hosting, encryption in transit, access controls, and the security features of the providers listed above. No system is completely secure, but we take protecting your information seriously.

Your rights

Under POPIA (and the GDPR where it applies) you have the right to:

  • ask what personal information we hold about you and request a copy;
  • ask us to correct or update it;
  • ask us to delete it, where we are not required to keep it;
  • object to or restrict certain processing;
  • withdraw consent at any time; and
  • opt out of marketing communications.

To exercise any of these, email us at [email protected]. If you are not satisfied with our response, you have the right to complain to the Information Regulator of South Africa (inforegulator.org.za), or to your local data protection authority if you are in the EU or UK.

Children

Our site and services are intended for businesses and adults. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above. Please check back occasionally.

Contact us

For any privacy question or request, email [email protected].