legal / privacy
Privacy Policy
Gro Digital (Pty) Ltd · Last updated 4 August 2026
Who we are
Gro Digital (Pty) Ltd ("Gro Digital", "we") is a South African software and digital services company (registration 2020/064443/07). This policy covers our website (grodigital.co.za), our client portals, and Engage, our hosted customer-engagement platform. We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA). Contact: hello@grodigital.co.za.
What we collect on this website
If you contact us we collect the details you submit (name, email, phone, message). We use privacy-respecting analytics to understand aggregate site usage. We do not sell personal information.
The Engage platform — two roles
Engage lets our business clients communicate with their own customers over WhatsApp, email and SMS. For that customer data, our client is the Responsible Party (they decide why and how their customers' data is used) and Gro Digital is the Operator — we process it only on the client's instructions, under a written agreement, to provide the service.
What Engage processes
On behalf of each client, Engage processes: contact details (name, phone number, email), profile attributes the client supplies, message content and delivery metadata for conversations between the client and their customers, and consent records (opt-ins, opt-outs, and their timestamps). WhatsApp messages are transported by Meta Platforms under Meta's WhatsApp Business terms.
Consent and marketing
Marketing messages through Engage are sent only to people who have opted in. Every opt-in and opt-out is recorded with an audit trail. Replying STOP to any WhatsApp or SMS message stops marketing immediately and automatically; START re-subscribes.
Where data lives and how it's protected
Engage data is hosted in Johannesburg, South Africa. Each client's data is isolated in its own tenant. Data is encrypted in transit (TLS) and at rest; access credentials are additionally encrypted at the application layer. Access is restricted to authorised personnel and is audit-logged.
Retention
We retain personal information for as long as needed to provide the service to the relevant client, meet legal obligations, or as instructed by the client as Responsible Party. Consent records are retained as evidence of lawful processing.
Your rights & data deletion
Under POPIA you may request access to, correction of, or deletion of your personal information. If your data was processed through Engage on behalf of one of our clients, you can contact that business directly, or email us at hello@grodigital.co.za with the business's name and your phone number or email — we will action deletion with the relevant client within 30 days. To stop WhatsApp or SMS marketing instantly, reply STOP to the message.
Sub-processors
We use a small number of vetted service providers to deliver our services: Meta Platforms (WhatsApp Business Platform — message transport), Resend (email delivery), Fly.io (application and database hosting, Johannesburg region), and Sentry (error monitoring). Each processes data only as needed to provide their service to us.
Cookies & analytics
This website uses only functional storage (such as remembering your theme preference) and privacy-respecting aggregate analytics. We do not use advertising trackers or sell browsing data.
Complaints
You may lodge a complaint with the Information Regulator (South Africa): inforegulator.org.za.
Changes
We'll update this page when our practices change; the date above reflects the latest revision.