Who this policy covers
This policy explains how XP Labs Pty Ltd ("XP Labs", "the company") processes personal information collected through xplabs.co.za, including the planning conversation, the Growth Brief, the contact form, and general site analytics. It is written to align with South Africa's Protection of Personal Information Act (POPIA).
Information XP Labs collects
The website collects information in three ways:
- The planning conversation. Your answers are stored in your own browser (locally) while the conversation is in progress. Nothing about the conversation reaches XP Labs until you choose to build and send a Growth Brief.
- The Growth Brief and contact form. When submitted, XP Labs receives the details provided - typically a first name, work email, company name, an optional phone number, and the selected answers and free-text responses that make up the brief or message.
- Automatic analytics. Aggregate, anonymised interaction data (for example, that a conversation started, a page was viewed, or a brief was generated) is collected via Google Analytics, which uses cookies or similar technology. This does not include the content of your answers or your contact details.
How this information is used
- To prepare for and respond to an enquiry or a submitted Growth Brief.
- To send the requested brief or a reply to a contact message.
- To understand, in aggregate, how the website and planning conversation are used, so they can be improved.
- To meet legal, accounting or security obligations where required.
Personal information is never sold, and is not used for purposes beyond those listed here without asking first.
Legal basis for processing
Under POPIA, information submitted through the contact form or Growth Brief is processed with your consent, given by submitting it, and because it is necessary to respond to your request. Aggregate analytics are processed on the basis of XP Labs' legitimate interest in understanding and improving the website, balanced against your right to privacy.
Cookies and similar technology
The site uses Google Analytics (GA4) to measure aggregate usage. GA4 sets cookies in your browser to distinguish visitors and sessions. No advertising or cross-site tracking cookies are used. You can block or clear cookies at any time in your browser settings; the site remains usable without them, though the planning conversation relies on local browser storage (not a cookie) to let you resume where you left off.
Sharing and third parties
Information is not shared with third parties for their own marketing purposes. It may be processed by service providers acting on XP Labs' behalf and under its instruction - for example, email delivery and hosting infrastructure, and Google Analytics for aggregate measurement - solely to provide the website and respond to enquiries. It may also be disclosed where required by law.
Retention
A submitted Growth Brief or contact message is kept for as long as reasonably needed to respond to it and for a limited period afterwards for record-keeping, then deleted or anonymised. Conversation progress stored in your own browser remains there until you clear it or it expires locally; it is never transmitted unless you submit a brief.
Security
Reasonable technical and organisational measures are used to protect personal information against loss, unauthorised access, alteration or disclosure, including transmitting the site over HTTPS and restricting access to submitted information to what is needed to respond to it. No system is completely secure, and information is provided at your own risk.
Your rights
Under POPIA, you have the right to:
- ask what personal information XP Labs holds about you;
- request that inaccurate or outdated information be corrected;
- request that your information be deleted, where there is no lawful reason to keep it;
- object to processing carried out on the basis of legitimate interest; and
- lodge a complaint with the Information Regulator of South Africa if you believe your information has been mishandled.
To exercise any of these rights, email hello@xplabs.co.za. You can also clear your saved conversation progress at any time using "start a new conversation", or by clearing site data in your browser.
Children's privacy
This website is intended for business use and is not directed at children. XP Labs does not knowingly collect personal information from children.
Changes to this policy
This policy may be updated from time to time to reflect changes to the website or to legal requirements. The "last updated" date at the top of this page will change accordingly.
Contact and Information Officer
For any privacy question, correction, deletion request, or complaint, contact XP Labs' Information Officer at hello@xplabs.co.za. The Information Regulator of South Africa can be reached at inforegulator.org.za.