VulaFlow

Privacy notice

How we handle your information

This notice explains what personal information we collect when you join the VulaFlow early access list, why we collect it, and what you can do about it. We have tried to keep it plain and short.

Last updated: 3 November 2026

1. Who we are

VulaFlow is the trading name of Njabulo Shabalala, a sole proprietor based in Johannesburg, South Africa. We decide why and how your information is used. Under the Protection of Personal Information Act (POPIA), that makes us the "responsible party".

You can reach us at shabalala@bnzgroup.co.za. Our information officer is Njabulo Shabalala, registered with the Information Regulator.

2. What this notice covers

It covers this website and the early access sign-up form, and the information you give us about yourself and your business. It does not cover the VulaFlow platform itself. Before anyone uploads company documents to the platform, it will have its own notice that explains how those documents are handled.

3. What we collect

If you sign up as a buyer, we ask for your name, work email, company, role and a line about what you buy.

If you sign up as a supplier, we ask for your business name, your name, your WhatsApp or phone number, your province, what you supply, and whether your business is registered with CIPC.

We also record that you gave your consent, and when. We do not ask for ID numbers, bank details or company documents on this form.

Giving us this information is voluntary. If you choose not to, we cannot add you to the early access list.

Our website host may keep standard server records, such as your IP address and the pages you opened, to keep the site running and secure. Our pages also load fonts from Google, which means Google can see your IP address when a page loads.

4. Why we collect it

We use your details to:

  • contact you when early access opens for your side of the platform
  • talk to you about a pilot or about your experience as a buyer or supplier
  • understand who is interested, so we can build the right things first

We rely on your consent. We may contact you by email, phone or WhatsApp about early access and your feedback. You can ask us to stop at any time by replying "stop" or emailing us, and we will. We do not sell your information, and we do not use it for unrelated marketing.

5. Who we share it with

We use a few service providers to run the site and receive sign-ups. They handle your information only on our behalf and under our instructions:

  • Web3Forms, which receives and delivers sign-ups from the form
  • Vercel, which hosts this website
  • Google Workspace, which delivers email to us
  • Google Fonts, which supplies the fonts on our pages

We may also share information where the law requires it.

6. Where your information is stored

Web3Forms, Vercel and Google may process or store information outside South Africa, including in the United States and the European Union. We only send personal information abroad where POPIA allows it, and where the provider is bound by contract or law to protect it to a standard similar to POPIA. By submitting the form, you consent to this cross-border transfer.

7. How long we keep it

We keep your details for as long as you remain on the early access list, and for up to 12 months after our last contact with you. We delete them sooner if you ask or if you withdraw your consent.

8. Your rights

You can ask us at any time to:

  • tell you what information we hold about you
  • correct it if it is wrong
  • delete it
  • stop using it, and withdraw your consent
  • stop processing it, if you object to how we use it

Email shabalala@bnzgroup.co.za and we will respond. If you are not happy with how we handle your information, you can complain to the Information Regulator (South Africa) at POPIAComplaints@inforegulator.org.za or through inforegulator.org.za.

9. How we protect it

We take reasonable technical and organisational steps to keep your information safe, such as limiting who can see it and choosing providers with sound security. No system is perfectly secure, and if something goes wrong with your information, we will tell you and the Information Regulator as the law requires.

10. Children

VulaFlow is for businesses and the adults who run them. We do not knowingly collect information from anyone under 18.

11. Changes to this notice

If we change this notice, we will update the date at the top. If a change affects how we use your information in a significant way, we will ask for your consent again.