Privacy Policy
Last updated 2 July 2026
Who we are (Responsible Party)
Bright10 is operated by 8t20 Capital (Pty) Ltd, trading as Bright10, of East Wing Offices, 68 Silverboomkloof Rd, Somerset West, 7130, South Africa. For the purposes of the Protection of Personal Information Act 4 of 2013 (POPIA), 8t20 Capital (Pty) Ltd is the Responsible Party. Contact us at hello@bright10.co.za.
Information Officer
Our Information Officer is Andrew Taylor. For any privacy matter — a question, a request, an objection or a complaint — email hello@bright10.co.za or write to the address above, marked for the attention of the Information Officer.
Information we process
For prospective clients, we work with publicly available business information (such as a company name, website and listed business contact details) to assess and demonstrate how a website could be improved. For clients and enquiries, we process the details you provide to us (name, email, phone, company and message) to deliver our services. We do not knowingly collect special personal information or children's information.
How we use it, and our lawful basis
We use this information to prepare website previews and proposals, respond to enquiries, deliver and manage our services, take payment, and communicate about your account. Under POPIA we rely on: performance of a contract (or steps taken at your request before one), our legitimate interest in business-to-business marketing to firms our service is relevant to, your consent where we ask for it, and compliance with our legal obligations (such as tax records). We do not sell your information.
Your rights under POPIA
You have the right to ask what personal information we hold about you and to request access to it; to ask us to correct or delete it; to object to processing, including direct marketing; and to withdraw consent where processing is based on consent. To exercise any of these rights, email hello@bright10.co.za — we will action it promptly. You also have the right to complain to the Information Regulator (South Africa) at inforeg.org.za.
Direct marketing and your choices
Our outreach to prospective businesses is business-to-business and relates to a service relevant to that business. You can opt out at any time — reply "stop", use any unsubscribe link, or email hello@bright10.co.za — and we will stop and record your preference.
Service providers (Operators)
We use trusted providers to run our service, including Vercel (hosting), Supabase (database), Resend (email), and Paystack (payments — card details are handled by the payment provider, never stored by us). They process data on our behalf as Operators under POPIA. Some providers process information outside South Africa; where they do, we rely on the cross-border transfer grounds POPIA permits.
Security and retention
We take reasonable, appropriate technical and organisational measures to protect personal information, including access controls, encryption in transit and restricted database access. We keep personal information only as long as needed for the purposes above or as required by law, and we will notify you and the Information Regulator of a data compromise as POPIA requires.