Pype

Privacy policy

Last updated: 4 September 2026

This website is operated by Pype (Pty) Ltd ("Pype", "we", "us", "our"), registration number 2015/040692/07. We respect your privacy and are committed to protecting your personal information. This policy explains what we collect when you use this website, why we collect it, how we use and protect it, and the rights you have.

We process personal information in line with the Protection of Personal Information Act, 2013 (POPIA). If you are in the United Kingdom or the European Economic Area, we also process your information in line with the UK GDPR and the EU GDPR.

What we collect

Information you give us. When you complete a form on the site, we collect the details you enter:

  • Contact form and discovery-call request: your first and last name, work email, contact number, company, and what you need.
  • Newsletter signup: your email address.

Information we collect automatically. When you browse the site we collect standard technical and usage data, such as your IP address, browser and device type, the pages you visit, and the links that referred you. If you arrive by clicking one of our Google adverts, we also store the click identifier from that advert. We collect this through cookies and local storage (see Cookies and similar technologies below) and through the standard server logs kept by our hosting provider.

How we use your information

For each purpose below, this is the basis we rely on to use your information:

  • To respond to your enquiry, prepare a proposal, and provide our services - necessary to take steps at your request before entering into a contract, or to perform a contract with you.
  • To send you the newsletter you asked for, and occasional related updates - your consent, which you can withdraw at any time.
  • To understand how the site is used, and to measure whether our advertising works - our legitimate interest in improving the site and our marketing, balanced against your rights. See Cookies and similar technologies below for how you control this.
  • To keep the site secure and to meet our legal obligations - necessary to comply with a legal obligation, or our legitimate interest in keeping the site and our business secure.

Cookies and similar technologies

A cookie is a small file a site stores in your browser. Local storage does much the same job, in a slightly different place. This is everything this site stores, and why:

If you are in the United Kingdom or the European Economic Area, the cookie banner shown on your first visit lets you choose which of the categories below you are comfortable with - nothing except the strictly necessary row is set until you choose. Visitors elsewhere are not shown this choice, but remain free to block or delete any of it at any time (see How to refuse or remove these below).

Name Kind Set by What it is for Kept for
_ga Cookie (first-party) Google Analytics Tells return visits apart from new ones, so we can count visitors rather than page loads. 2 years
_ga_<id> Cookie (first-party) Google Analytics Holds the state of your current visit, such as when it started. 2 years
_gcl_au Cookie (first-party) Google Ads Records that you arrived from one of our adverts, so that an enquiry you send later can be counted against it. 90 days
_gcl_aw, _gcl_gb Cookie (first-party) Google Ads Holds the click identifier from the advert you arrived from. Only set if you did arrive from one. 90 days
pype.attribution Local storage Pype The click identifier from a Google advert, so that an enquiry can be matched to the advert that brought you. See Advertising click identifiers below. 90 days
cc_cookie Cookie (first-party) Pype (cookie consent banner) Remembers the cookie choice you made, so we do not ask again on every visit. 182 days

What we do not use

We run no remarketing and no audience lists, so nothing here is used to follow you around other websites or to show you our adverts elsewhere. There is no tag manager, no social media pixel, no session recording and no chat widget. Our fonts are served from our own domain rather than from a font service, so loading a page makes no request to one. Everything in the table above is first-party: none of it can be read by another site.

We do run Google's advertising tag, but only to count enquiries. It records that an advert brought you here, and it is told when a form is successfully sent so the enquiry can be matched to the advert that produced it. Nothing you typed is passed to Google.

Advertising click identifiers

When you arrive from one of our Google adverts, the link carries a click identifier (gclid, or gbraid or wbraid if you have limited ad tracking on your device). If you are outside the United Kingdom and the European Economic Area, we store that identifier in your browser's local storage as soon as the page loads, and keep it for 90 days. If you are in the United Kingdom or the European Economic Area, it is only stored once you accept advertising cookies in the cookie banner - if you do not, it is never stored, and an enquiry you go on to submit cannot be matched back to the advert. Google's advertising tag separately stores its own copy in the _gcl_ cookies listed above, on the same terms, for the same 90 days.

It is only ever sent anywhere if you choose to submit a form. When you do, it is passed to HubSpot alongside your enquiry so that we can tell which advert led to it, and Google Ads is told that an enquiry happened so it can count the advert as having worked. That is how we judge whether our advertising is worth continuing. It is not used to build a profile of you, it is not sold, and it is not used to target advertising at you.

Outside the United Kingdom and European Economic Area, we do this on the basis of our legitimate business interest in knowing whether our advertising works, and you can object to it at any time. In the United Kingdom and European Economic Area, we do it only with your consent, given through the cookie banner, which you can withdraw at any time using the "Cookie settings" link in the site footer. Clearing site data for this site also removes the stored identifier immediately.

What a form sends besides what you type

When you submit a form, we also send the address and name of the page you submitted it from, so we know what you were reading when you got in touch. If a click identifier is stored, that goes too. If your browser already holds a HubSpot tracking cookie (hubspotutk) from elsewhere, it is included so HubSpot can link the enquiry to your earlier activity. Nothing on this site sets that cookie.

How to refuse or remove these

  • If you are in the United Kingdom or the European Economic Area, use the "Cookie settings" link in the site footer at any time to change which categories you have accepted.
  • Your browser can block or delete cookies, either for all sites or just for this one. The site works normally without them.
  • To opt out of Google Analytics across every site that uses it, install Google's Analytics opt-out browser add-on.
  • Clearing site data for this site in your browser removes the stored advertising click identifier, in both local storage and the _gcl_ cookies.
  • Google's own ad settings control how your Google account is used for advertising, across every site.
  • You can also object to any of this by contacting our Information Officer, using the details under Contact us below.

Who we share it with

We do not sell your personal information. We share it only with the service providers who help us run the site and respond to you, acting on our instructions:

  • HubSpot - our customer relationship management system. Contact form and discovery-call enquiries are stored here so we can respond to you and keep a record of our correspondence. The data is held in HubSpot's European data centre.
  • Formspree - processes and delivers newsletter signups to us.
  • Google (Google Analytics and Google Ads) - provides website analytics, and counts how many enquiries our advertising produced.
  • Vercel - hosts the website and keeps server logs.

We may also disclose information where the law requires it.

International data transfers

Some of our service providers are based outside South Africa (for example, in the United States), so your information may be processed in another country. Where this happens, we take reasonable steps to ensure it is protected on a basis permitted by POPIA, such as the provider being subject to laws or agreements that offer an adequate level of protection.

If you are in the United Kingdom or the European Economic Area, some of your information is also transferred to and processed in South Africa, which does not have a UK or EU adequacy decision. We rely on the contractual safeguards our processors provide for this, including the EU Standard Contractual Clauses that Google and HubSpot include in their data processing agreements with us.

Marketing and how to opt out

We only send you the newsletter if you have asked for it. You can ask us to stop at any time by contacting us using the details on our contact page. We will stop sending you marketing messages when you opt out, although we may still need to contact you about an enquiry you have made.

How long we keep it

We keep your personal information only for as long as we need it for the purposes above, or for as long as the law requires. When we no longer need it, we delete or anonymise it.

How we protect it

We take reasonable technical and organisational measures to protect your personal information against loss, misuse and unauthorised access. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

Your rights

Under POPIA, and under the UK GDPR and EU GDPR if they apply to you, you have the right to:

  • ask what personal information we hold about you and request a copy;
  • ask us to correct or delete information that is inaccurate, irrelevant or out of date;
  • object to us processing your information in certain circumstances;
  • ask us to restrict how we use your information, in certain circumstances;
  • receive certain information you gave us in a portable format, in certain circumstances;
  • withdraw any consent you have given, at any time;
  • complain to a data protection regulator (see Complaints below).

To exercise any of these rights, contact our Information Officer and data protection contact (below). We will respond within the timeframes required by law.

Contact us

If you have any questions about this policy or how we handle your information, contact our Information Officer and data protection contact, Simon Bestbier, through the details on our contact page. Our business address is Unit 203, Bonitas Office Park, Carl Cronje Drive, Tygervalley, Cape Town, 7530.

Complaints

If you believe we have not handled your personal information properly, you can lodge a complaint with the Information Regulator (South Africa). Since 1 April 2025, POPIA complaints are submitted through the Regulator's eServices portal at eservices.inforegulator.org.za. More information is at inforegulator.org.za.

If you are in the United Kingdom, you can also complain to the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the European Economic Area, you can complain to your local data protection supervisory authority.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.