Privacy & cookies

KXK Group operates the KXK.co.za store and hosted-profile service. This notice explains how the application handles personal information under POPIA. The responsible party is KXK Group, 32 Rynfield Close, Country View, Benoni, 1501, South Africa; telephone +27 65 989 2257, email info@kxk.co.za. Privacy questions and information requests use the same channel.

Account information includes your email and sign-in information, processed through Supabase Authentication to manage access. Profiles may contain a name, photo, banner, contact details, company information, links, colours and price lists that you choose to provide. Chip records include the chip code, activation information, status, linked profile and tap count.

Orders record the purchaser’s details, delivery information, selected products and customisation supplied at checkout. Contact-exchange submissions include the visitor’s name and any company, phone, email or note they provide. We use this information to provide profiles, manage chips, process orders and deliver the contact exchange requested by the visitor. Provide only information needed for that purpose.

An active profile is publicly accessible to anyone with its link or chip; recipients can download its contact file and share it further. Choose public fields carefully. Search noindex instructions are used for tap pages but cannot guarantee confidentiality or prevent copying.

Submitting the Exchange form shares your supplied details with the profile owner and, where relevant, their company administrators. Those recipients are responsible for using the details lawfully. Exchanging a contact is not blanket consent to unrelated marketing. Company administrators must inform staff about publication and access.

The application uses Supabase for authentication, records and uploaded media, and hosting infrastructure to serve the website. Providers process data to operate these services. Uploaded media can be served through long-lived signed links; possession of such a link may allow access even though its storage bucket is private.

Providers may process information outside South Africa. Any international transfers must satisfy POPIA’s applicable safeguards. Specific hosting locations, processor agreements and the applicable transfer safeguards must be confirmed before launch; this notice does not claim a verified South African-only storage location.

The application uses browser local storage for cart contents and sign-in state. These support shopping and account access. Clearing storage can remove the local cart or sign you out. The site also loads web fonts and may display remotely hosted profile images, which can send technical connection information to their providers.

This notice does not authorise advertising cookies or unrelated tracking. Any future non-essential tracking needs an appropriate disclosure and consent process where required. External profile links lead to services governed by their own privacy notices.

Information should be kept only as long as needed for the stated purposes and applicable recordkeeping obligations. No fixed retention schedule or automated account-deletion process has been configured in this application; these operational arrangements must be confirmed before launch.

Access controls protect account records, but no online service is risk-free. Keep passwords and PINs private and avoid publishing information you wish to keep confidential. Security incidents must be handled and reported as required by POPIA.

Subject to applicable law, you may request access to, correction or deletion of your personal information, object to processing and withdraw consent where consent is the basis. We may need to verify your identity. Legal obligations can require some records to be retained.

Send privacy requests to info@kxk.co.za or +27 65 989 2257. You may also raise a complaint with South Africa’s Information Regulator at inforegulator.org.za. No fee or limitation in this notice overrides your statutory rights.