Atara SoftwareStart a project
// Legal  —   Privacy Policy

Privacy Policy.

This policy explains how Atara Software collects, uses, stores and shares personal information when you visit atarasoftware.co.za, contact us about a project, or engage us for software development services. It is aligned with the Protection of Personal Information Act, 2013 (POPIA) and, where applicable, the UK GDPR and the EU General Data Protection Regulation (GDPR).

Effective date: 24 July 2026

// 01

Who we are

Atara Software (Pty) Ltd is a South African custom software studio, registered in the Republic of South Africa (Registration No. 2020/212425/07, VAT No. 4070320454) and based in Durban, KwaZulu-Natal. For the purposes of POPIA, we are the Responsible Party for personal information collected through this website and through direct engagement with us.

/> Company
Atara Software (Pty) Ltd
Reg. 2020/212425/07 · VAT 4070320454
/> Phone
+27 60 531 1495
/> Based in
Durban, KwaZulu-Natal, South Africa
// 02

What information we collect

We only collect information that we need in order to serve you. This includes:

  • Identity and contact details you provide — name, business name, email address, phone number, and anything else you include when you contact us or engage us for work.
  • Project and correspondence data — the content of emails, WhatsApp messages, calls, meeting notes and documents you share with us during discovery and delivery.
  • Website usage data — pages viewed, referring URL, approximate location (country/region), device type and browser, collected via privacy-respecting analytics.
  • Technical logs — IP address, request timestamps and error data captured by our hosting and infrastructure providers for security and reliability purposes.

We do not knowingly collect personal information from children under 18. We do not sell your personal information under any circumstances.

// 03

How we use your information

Your information is used for the following purposes:

  • Responding to enquiries and providing quotations.
  • Delivering the software development services you have engaged us for.
  • Sending you project-related communication — status updates, invoices, and technical documentation.
  • Improving the security, reliability and performance of this website.
  • Meeting our legal, tax and record-keeping obligations under South African law.

We will not use your information for direct marketing without your consent. If you opt into any newsletter or update list, you may unsubscribe at any time.

// 04

Legal basis for processing

Depending on the interaction, we rely on one or more of these lawful bases:

  • Your consent — for example when you fill in a contact form or opt into communication.
  • Performance of a contract — when we deliver software services you have engaged us for.
  • Legitimate interests — for example running secure infrastructure, preventing fraud, or improving our services, provided your rights are not overridden.
  • Legal obligation — when we are required to retain records for tax, accounting or regulatory reasons.
// 05

Sharing with third parties

We share personal information only with trusted service providers who help us run our business, and only to the extent necessary. These include cloud hosting providers, email and communication tools, analytics platforms, payment processors and professional advisors (for example accountants and lawyers).

Every third-party processor we use is chosen with data protection in mind, and is contractually bound to handle personal information in line with their own published privacy terms. Some of these providers are based outside South Africa; where that is the case, we take reasonable steps to ensure your information continues to receive an adequate level of protection.

We may also disclose personal information where required by law, court order, or to protect our rights, property or safety, or those of our clients or the public.

// 06

How long we keep it

We retain personal information only for as long as needed for the purpose it was collected, plus any period we are legally required to retain records for (typically five years for tax and accounting purposes under South African law). Project correspondence and source code artefacts may be retained for longer where they form part of the deliverable owned by the client.

// 07

How we protect it

We take reasonable technical and organisational measures to safeguard personal information — including access controls, encryption in transit (HTTPS/TLS), hardened cloud infrastructure, regular software updates, principle-of-least- privilege access, and secure development practices. No system connected to the internet can be guaranteed to be completely secure, but we treat protecting your information as a first-order engineering concern, not an afterthought.

// 08

Your rights

Under POPIA (and the UK or EU GDPR where applicable) you have the right to:

  • Request access to the personal information we hold about you.
  • Request correction or deletion of your personal information.
  • Object to the processing of your personal information in certain circumstances.
  • Withdraw consent, where processing is based on consent.
  • Lodge a complaint with the Information Regulator (South Africa) or your local supervisory authority.

To exercise any of these rights, contact us at info@atarasoftware.co.za. We will respond within a reasonable timeframe and, where possible, within 30 days.

South African Information Regulator: inforeg@justice.gov.za  ·  +27 (0) 10 023 5200.

// 09

Cookies and analytics

This website uses a minimal set of cookies and privacy-respecting analytics to understand how visitors use the site and to keep it working reliably. We do not use advertising trackers or cross-site profiling cookies. You can disable cookies via your browser settings; some site features may not work correctly if you do.

// 10

International transfers

Some of our infrastructure providers process data outside South Africa (for example in the European Union or the United States). Where personal information is transferred across borders, we rely on providers who commit to comparable data protection standards, such as GDPR compliance or Standard Contractual Clauses.

// 11

Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date at the top of the page. Material changes will be communicated to active clients directly. Continued use of the site or our services after an update constitutes acceptance of the updated policy.

// 12

Contact us

For any question about this policy, or about how we handle your personal information, please get in touch.

/> Company
Atara Software (Pty) Ltd
Reg. 2020/212425/07 · VAT 4070320454
/> Phone
+27 60 531 1495
/> Based in
Durban, KwaZulu-Natal, South Africa