Privacy policy

BraceOctopus is the responsible party for personal information collected through https://braceoctopus.co.za. We are based in South Africa, with a presence in Johannesburg and Cape Town. Contact briefing@braceoctopus.co.za for privacy requests.

We handle personal information under the Protection of Personal Information Act 4 of 2013 (POPIA).

We collect only what the current site actually uses.

Briefing form. The form asks for your name, organisation, work email, interest, and message. In this version the form checks those fields in your browser and shows a confirmation on the page. It does not yet send the message to us or store it. If you email briefing@braceoctopus.co.za directly, we receive whatever you include in that mail.

Microsoft Marketplace subscription. When you open the configure page after a purchase, Microsoft adds a token to the address. We send that token to Microsoft to resolve the subscription. We then store the subscription identifier, name, offer, plan, quantity, status, beneficiary email address, and the last Marketplace action. We keep that record so the subscription stays in step with Microsoft, including plan changes, quantity changes, suspension, reinstatement, and cancellation.

We do not ask for special personal information, and we do not run advertising or analytics trackers on this marketing site.

Briefing correspondence is used to answer a request you made. Marketplace subscription details are used to identify the purchase, activate it when you ask us to, and keep access aligned with the subscription Microsoft holds. That processing is necessary for the contract you entered by buying the offer, and for our legitimate interest in operating the subscription correctly.

We do not sell personal information. We do not use Marketplace beneficiary details to market to people who have not asked to hear from us.

Microsoft receives the resolve, activate, and subscription-operation calls required to transact the offer. Microsoft's own privacy terms apply to the Marketplace account and the purchase.

Subscription records are stored in a database operated for us by Supabase. Supabase processes that information only so we can run the subscription. We do not give the database operator the right to use it for their own purposes.

Email you send us is kept for as long as the conversation and any following engagement reasonably require. A Marketplace subscription record is kept while the subscription is active and for as long afterwards as we need it to show what was purchased, changed, or cancelled. We delete or de-identify a record when we no longer need it for that purpose, unless the law requires us to keep it.

Under POPIA you may ask whether we hold personal information about you, ask for a copy, ask for a correction, or object to processing where the law allows. You may also lodge a complaint with the Information Regulator of South Africa.

Send requests to briefing@braceoctopus.co.za. We may need to confirm that the request comes from you before we act on it.

Marketplace calls are made from our server, not from the browser. The database is not open to the public site. No method of storage is perfect, and we will tell you when the law requires us to notify you of a compromise.

We will update this page when the information we collect changes, including when the briefing form starts to deliver messages to us. The date at the top is the latest version.