This policy explains how Mont6 ("we", "us") collects and uses personal information when you visit www.mont6.co.za, contact us, request a quote or use our client portal. We process personal information in line with the Protection of Personal Information Act, 2013 (POPIA).
1. Who we are
The responsible party is Mont6 Technologies (Pty) Ltd (registration number 2017/314426/07), trading as Mont6, of 663 Silver Place, Willow Acres Pretoria, 0081.
Our Information Officer is Anja Smit. You can reach them at info@mont6.co.za or on (012) 004-2090.
2. What we collect
We collect only what we need for the purposes in section 3.
2.1 When you use the contact form: your name, email address, the type of project and your message.
2.2 When you request a quote:
- To start: your name and email address. We then give you a quote reference (for example M6-XXXX-XXXX).
- In the project questionnaire: your phone number, company name and company address, and the project information you choose to share. That covers a description of the project, who will use it, platforms, features, existing assets, timeline, and whether you are interested in a proof of concept or a minimum viable product.
- If you deal with a non-disclosure agreement (NDA): which NDA route you chose, when you accepted our template NDA and which version, and any NDA document you upload.
- While we prepare and discuss your quote: the messages and files you and we send through the portal, the proposals we send you, and your responses to them. Your responses include the options you accept, when you accept our terms, extension requests, and any reason you give for declining.
2.3 When you sign in to the client portal: we email you a one-time code. We store only a scrambled (hashed) copy of the code, when it expires, how many attempts were made, and the IP address the request came from. Codes expire after 10 minutes.
2.4 When you browse the website:
Cookies we set (strictly necessary):
m6_quote_draftkeeps your quote request open while you complete it, for up to 24 hours.m6_portalkeeps you signed in to the client portal, for up to 2 hours.
Both are only readable by our server, not by scripts in your browser. Without them the quote process and the portal cannot work.
Google Analytics: this measures how visitors use the site (pages visited, approximate location, device and browser) using its own cookies.
Google Ads: this measures whether our adverts lead to enquiries. When you send the contact form, start a quote or submit the questionnaire, we tell Google that this happened. For quotes we include your quote reference, so the same request is not counted twice. We do not send your name, email address or project details to Google.
Google reCAPTCHA: this checks that forms are sent by a person, not an automated program. Google collects information about your device and how you interact with the page to do so.
Hosting logs: our hosting provider may keep standard technical logs, such as IP addresses and the pages requested, to run and secure the service.
We do not knowingly collect special personal information (such as health, religious or biometric information), and we ask that you do not include it in your project information.
3. Why we use it
| Purpose | Information used | Basis under POPIA |
|---|---|---|
| Reply to your enquiry | Contact form details | Your request; our legitimate interest in responding |
| Prepare, send and manage your quote and proposals | Quote, questionnaire, NDA, messages and files | Steps you asked us to take before entering into a contract |
| Carry out the project once you accept a proposal | Quote information and project records | Performing our contract with you |
| Keep confidentiality obligations | NDA records | Contract; legal obligation |
| Keep the portal secure and stop spam and abuse | Sign-in codes, IP addresses, reCAPTCHA | Legitimate interest |
| Understand and improve the website and our advertising | Analytics and Ads data | |
| Keep financial and tax records | Invoices and payment records | Legal obligation |
We do not sell your personal information. We do not use your details to send you direct marketing. The emails we send you are about your enquiry, quote or project.
4. Who we share it with
We share personal information only with service providers (operators) who process it on our behalf and under our instructions:
- Resend sends our emails: portal sign-in codes, quote and proposal notifications, and contact form messages.
- Google provides Analytics, Ads and reCAPTCHA (see section 2.4).
- Amazon Web Services hosts our website, database and the files you upload.
- Sage holds invoices and payment records once a project goes ahead.
We may also disclose information where the law requires it, or to protect our legal rights.
5. Information sent outside South Africa
Resend and Google process information on servers outside South Africa, including in the United States.
We use these providers only where they are bound by laws or agreements that give your information a level of protection substantially similar to POPIA, as section 72 of POPIA requires.
6. How we protect it
- All traffic to the website is encrypted (HTTPS).
- Portal sign-in needs your email address, your quote reference and a one-time code sent to that address. We store only hashed codes, limit how many codes can be requested, and sessions expire.
- Files you upload are stored privately. They are never publicly reachable, and can only be downloaded by you (signed in to your portal) and by our staff.
- Only authorised Mont6 staff can see quote requests.
No system is perfectly secure. If we become aware of a security compromise affecting your personal information, we will notify you and the Information Regulator as POPIA requires.
7. How long we keep it
We do not delete quote information automatically. It stays until it is deleted as described below:
- Quote requests you delete: removed immediately, together with their messages, proposals, files and sign-in records (see section 8).
- Declined requests: if you decline a proposal and we close the request, we delete it.
- Requests we reject, and proposals that expire: kept until you delete them from your portal, or until 12 months after the last activity.
- Accepted projects: kept for as long as needed to deliver and support the project and to resolve any dispute, and until you request deletion and we approve it (section 8.2).
- Contact form messages and emails: kept in our mailbox for 1 year.
- Invoices and payment records: kept for as long as tax and company law require.
- Backups: deleted information may remain in backups for up to 60 days before it is overwritten.
- Analytics data: kept by Google for 14 months.
8. Deleting your information
8.1 Before you accept a proposal, you can delete your quote request yourself at any time:
- Sign in to the https://www.mont6.co.za/portal/login with your email address, your quote reference and the code we email to you.
- Choose to delete your request, and type your quote reference to confirm.
Deletion is immediate and complete. It removes your details, questionnaire answers, NDA records, messages, proposals, uploaded files and sign-in records. We receive a notice containing only your quote reference, so we know the request is gone. Emails that were already sent to you or to us are not removed by this.
8.2 After you accept a proposal, the project records may be needed to complete the work or to resolve a dispute. You can still ask for deletion through the portal. We will review the request, then either delete everything or explain in writing, in your portal, why we need to keep it for now.
8.3 Contact form messages and anything else: email info@mont6.co.za and we will delete it unless the law requires us to keep it.
9. Your rights
Under POPIA you may:
- ask whether we hold personal information about you, and ask for a copy of it
- ask us to correct or update information that is inaccurate or incomplete
- ask us to delete information, as described in section 8
- object to our use of your information, including for analytics and advertising
- withdraw your consent where we rely on it
To use these rights, email info@mont6.co.za. We may need to confirm your identity first, for example by asking you to sign in to the portal or reply from the email address on your request. We will respond within a reasonable time, and as POPIA and the Promotion of Access to Information Act require.
Limiting Google's tracking: you can block or delete cookies in your browser settings. You can also install Google's https://tools.google.com/dlpage/gaoptout, and change ad personalisation in Google's My Ad Center (https://myadcenter.google.com/).
Complaints: if you are unhappy with how we handle your information, please contact us first. You also have the right to complain to the Information Regulator (South Africa): inforegulator.org.za (https://inforegulator.org.za), PAIAComplaints@infoRegulator.org.za.
10. Children
Our services are for businesses and adults. We do not knowingly collect personal information from anyone under 18.
11. Changes to this policy
We may update this policy from time to time. The version and effective date at the top of this page show when it last changed. We will notify clients with open quote requests or projects of any significant change.