Privacy Policy

At One Click Design Pty (Ltd) ("One Click Design," "we," "us," or "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our SaaS platform, website builder, and hosting services (collectively, the "Services").

This policy complies with the Protection of Personal Information Act (POPIA) and the Electronic Communications and Transactions Act (ECTA) of South Africa, as well as global data protection frameworks including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you ("Personal Information") in the following ways:

• Information You Provide to Us: When you register for an account, subscribe to a tier, or contact support, we collect your name, email address, billing information, and account credentials.
• Information Collected Automatically: When you use our Services, we automatically collect data such as your IP address, browser type, device information, operating system, and usage statistics via analytics tools.
• Customer Data (Data Processor Role): As a website builder and hosting platform, we process and store data on behalf of our users (e.g., the content you upload to your storefront). Under POPIA and GDPR, we act as an "Operator" or "Data Processor" for this data, and you act as the "Responsible Party" or "Data Controller."

2. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain Services: To operate your account, provision custom domains (via Cloudflare), and host your websites (via Google Cloud/Firebase).
• To Process Payments: To manage subscriptions, billing, and Concierge setup services safely.
• To Improve Our Platform: To understand how our users interact with our Builder and AI tools, allowing us to fix bugs and deploy new features.
• To Communicate: To send you technical notices, security alerts, and administrative messages.
• To Comply with Legal Obligations: To resolve disputes, enforce our agreements, and comply with South African and international laws.

3. Legal Basis for Processing (POPIA & GDPR)

We only process your Personal Information when we have a valid legal basis to do so:

• Consent: You have given us clear consent to process your data for a specific purpose.
• Contractual Necessity: Processing is necessary to fulfill our Terms of Service (e.g., hosting your website).
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights.
• Legal Obligation: Processing is required to comply with the law.

4. How We Share Your Information

We do not sell your personal information. We only share your data with trusted third parties under strict confidentiality agreements to facilitate our Services:

• Service Providers: Infrastructure partners like Google Cloud (Firebase) for hosting and database management, Cloudflare for SSL and domain routing, and payment gateways for transaction processing.
• Legal Requirements: If required by law, subpoena, or other legal processes, we may disclose your information to law enforcement or government authorities.

5. International Data Transfers

Our Services utilize global infrastructure. Your information may be transferred to, and maintained on, servers located outside of South Africa or your country of residence (e.g., Google Cloud servers in Europe or the US). By using our Services, you consent to this transfer. We ensure that all third-party providers comply with GDPR and POPIA standards regarding international data transfers.

6. Your Data Protection Rights

Depending on your location, you have the following rights regarding your Personal Information:

• Right to Access: You can request copies of your personal data.
• Right to Rectification: You can request that we correct any information you believe is inaccurate or incomplete.
• Right to Erasure / Right to be Forgotten: You can request that we completely delete your personal data and permanently remove your account from our Firebase databases.
• Right to Restrict Processing: You can request that we restrict the processing of your personal data under certain conditions.
• Right to Data Portability: You can request that we transfer the data we have collected to another organization, or directly to you.

7. Data Security

We implement industry-standard security measures, including encryption in transit and at rest, secure Google Cloud vaults for API keys, and authenticated routing, to protect your Personal Information from unauthorized access, alteration, disclosure, or destruction. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

8. Data Retention

We will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in global laws or our platform architecture. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top.