Privacy policy

Last updated 13 October 2026. Version 2026-10.

Who is responsible

Phinda Systems (Pty) Ltd is the responsible party for personal information processed through Site Control, under the Protection of Personal Information Act (POPIA). Contact our information officer at support@sitecontrol.co.za.

What we collect

Account details: names, email addresses and roles of the people in your company. Your company's records: the jobs, costs, people, timesheets and documents you capture, which may include your employees' details. Payment details: we receive from Paystack only the card type, the last four digits, the expiry date and a payment reference. Your full card number is never sent to us. Usage details: sign-in times and technical logs to keep the service secure.

Why we use it

To provide Site Control to your company, to bill you, to send account emails (such as bills, receipts and password resets), to support you when you ask, to keep the service secure, and to improve it. We do not sell personal information and we do not use your records for advertising.

Who processes it for us

Supabase (database, sign-in and file storage, hosted in London, United Kingdom), Afrihost (website hosting and email, South Africa), Resend (sending email), Paystack (card payments, South Africa) and Anthropic (the in-app help assistant, and reading quotes and bills of quantities you choose to upload; only what you send is processed, in the United States, and it is not used to train AI models). Each is bound to protect the information and use it only to provide its service to us.

Information kept outside South Africa

Our database is in the United Kingdom, which has data protection law that gives a level of protection similar to POPIA. Help questions and documents you choose to have read are processed in the United States. By using Site Control you agree to this transfer, as section 72 of POPIA allows.

Keeping it safe

Each company's records are kept apart by the database itself, so one company cannot reach another's. Connections are encrypted. Support access is recorded and visible to your account owner.

How long we keep it

While your account is open, and for 90 days after it closes so you can download your records. Billing records are kept for 5 years, as tax law requires.

Your rights

You may ask to see, correct or delete personal information we hold about you, or object to how we use it, by emailing support@sitecontrol.co.za. If you are not satisfied with our answer, you may complain to the Information Regulator (South Africa) at inforegulator.org.za.

Employees' information

When your company captures its employees' details, your company is the responsible party for that information and we process it on your behalf.