Privacy Policy

Last updated: 2 November 2026

This privacy policy explains how Strata Logic (a trading name of Brandsplash (Pty) Ltd) ("we", "us", "Strata Logic"), the operator of Taplink (taplink.co.za), collects and uses personal information when you visit our website or submit our contact form, and when Taplink profiles and the Taplink admin portal are used. We comply with the South African Protection of Personal Information Act, 2013 (POPIA).

1. Who we are

Strata Logic (a trading name of Brandsplash (Pty) Ltd)

Boskruin, Randburg, Gauteng, South Africa

Email: web@taplink.co.za

2. Information we collect

When you submit our contact form we collect:

• Your name
• Your work email address
• Your company name
• Your contact phone number
• Your team size (optional)
• The message you send us
• The type of enquiry you choose
• Where you came from before you reached us: the referring website, any campaign parameters on the link you followed, and the Google Ads click ID if you arrived from one of our adverts

If you accept cookies, we also collect website usage data (pages visited, approximate location, device type, referrer) via Google Analytics 4, and we measure which visits led to an enquiry using Google Ads. We do not load any analytics or advertising cookies until you accept them, and clicking Decline leaves both switched off. Until you accept, Google's tag still loads and, under Google's consent mode, sends basic signals without cookies (for example, that a page was viewed), which Google uses to estimate visits it cannot measure directly.

Separately, and whether or not you accept cookies, the site keeps the referring website, any campaign parameters and any Google Ads click ID from your visit in your browser's local storage for 90 days. It stays in your browser and reaches us only if you submit the contact form, so that we know how you found us.

Enquiries that reach us by email, through the contact form or at web@taplink.co.za are stored in Taplink's administration system. We read them with the help of an AI service provided by Anthropic, which we use to prepare replies. A person reviews every reply before it is sent, and no reply goes out without that review.

3. Taplink profiles and the admin portal

Every Taplink card opens a public profile for the person who carries it, and our client companies manage those profiles in the Taplink admin portal. For this information, the client company that bought the cards is the responsible party for its cardholders' information, and Strata Logic processes it on the company's behalf as its operator. The platform is hosted on a server in South Africa.

Through the profiles and the portal we process:

• Cardholder details. Each cardholder's name, job title, contact details and photo, as entered by their company. Location data is removed from photos when they are uploaded.
• Profile activity. When a profile is viewed, a contact is saved, a link is clicked, the profile is shared or installed on a phone, or a visitor sends their details, we record the event with a one-way hash of the visitor's IP address. The IP address itself is never stored in these records, and the records are deleted after 24 months.
• Details sent through a profile. When a visitor uses the "Share your details" form, we record their name, their email address or phone number, any company and note they add, the time they gave consent and a hashed IP address. The details are emailed to the cardholder. They are not deleted automatically: the cardholder's company decides how long to keep them, and we delete them at its request.
• Competition entries. When a customer enters an in-store competition, we record their name, their email address or mobile number, the branch, the time they accepted the competition rules, the time of any opt-in to marketing and a hashed IP address. These are kept on the same basis as details sent through a profile.
• Session cookie. The profiles and the portal use a session cookie. The session record holds the visitor's IP address for the life of the session, which is 120 minutes.

If you saved a cardholder's contact or sent your details through a profile, and you want to know what is held about you or want it corrected or deleted, contact the company whose card you used, or email us and we will pass your request to that company.

4. How we use your information

Contact-form information is used solely to respond to your sales enquiry and discuss your potential rollout. We never use what you type into the form for advertising. If you accept cookies, we also use website usage data to understand which content is useful, to measure which advertising brought a visitor to us, and to show our adverts to people who have visited the site before. We do not sell your information, we do not build profiles of individuals, and no automated decision is made about you.

5. Who we share it with

We do not sell or rent your information. We share information with the following service providers strictly to operate the site and respond to enquiries:

• Our SMTP email provider, to deliver your contact-form message to our inbox.
• Anthropic, which provides the AI service we use to read enquiries and prepare replies that a person reviews before they are sent.
• Google Analytics, only if you accept cookies.
• Google Ads, only if you accept cookies, to measure which adverts produced an enquiry and to show our adverts to previous visitors.

6. How long we keep it

Contact-form messages are kept in our sales inbox for as long as the lead is active, and archived for up to 24 months after the last contact for record-keeping purposes. Enquiry records in our administration system are kept for 24 months after the last contact and then deleted, except that the value of a completed order is kept without any personal details, for reporting. Analytics data is retained according to Google Analytics defaults (currently 14 months) unless we delete it earlier. Information processed through Taplink profiles and the admin portal is kept as described in section 3.

7. Cookies

We use:

• Functional cookies. A session cookie required for the contact form's anti-bot measures and Post/Redirect/Get pattern. These are essential and always set.
• Analytics cookies. Google Analytics 4 cookies (`_ga`, `_ga_*`). Only set if you click Accept on the cookie banner.
• Advertising cookies. These are set by Google Ads and its associated domains (`doubleclick.net`, `googleadservices.com`) to measure which advert led to an enquiry and to show our adverts to people who have visited before. Only set if you click Accept.

You can withdraw consent at any time by clearing site data for taplink.co.za in your browser, which removes the stored choice and the stored campaign details, and returns the site to its default, in which no analytics or advertising cookies are set. The next visit will ask you again.

8. Your rights under POPIA

You have the right to:

• Ask what personal information we hold about you.
• Request that we correct or delete it.
• Object to its processing.
• Withdraw consent for analytics at any time.
• Lodge a complaint with the South African Information Regulator (inforegulator.org.za).

To exercise any of these rights, email web@taplink.co.za.

9. Information Officer

Our POPIA Information Officer is Wayne Exall, contactable at web@taplink.co.za.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top will reflect the most recent change.