Privacy Policy

Hlela Workspace is operated by The Triangle Corporation (Pty) Ltd, trading as Hlela Workspace, a South African private company (registration number 2026/328430/07) at 12 Mysori Avenue, Azaadville, Gauteng, 1750. We are the "responsible party" for your personal information under the Protection of Personal Information Act 4 of 2013 (POPIA). When this policy refers to "Hlela", "we", "us", or "our", it means The Triangle Corporation (Pty) Ltd.

This policy covers all Hlela platforms, including Hlela Workspace, as well as the Hlela marketing website at hlela.app.

When you create an account:

• Your first and last name
• Your email address
• Your password (stored securely, never in readable form)
• Your approximate country of registration (derived from your IP address at the time of registration, used for pricing only)

When you use Hlela Workspace:

• Booking records (what you booked, when, and for how long)
• Certification documents you upload (stored securely)
• Support ticket content and messages
• Maintenance logs and announcements you create
• Your workspace role and permission settings
• Device registration details for notifications (only if you turn notifications on)

When you make a payment:

• Card payments are processed by Paystack, our payment provider. You enter your card details on Paystack's secure page, not on ours.
• We receive confirmation of each payment, the card brand, the last four digits and the expiry date (so we can show you which card is on file). We never see or store your full card number or CVV.
• We store your plan, billing cycle, payment history and invoice records

When you contact us:

• Your name, email address, and the content of your message

Automatically, when you use our platforms:

• Your IP address (used for security and abuse prevention)
• Browser type and device information
• Error logs and performance data, anonymised where possible

• To provide the service: your account information is necessary to log you in and give you access to your workspace
• To process payments: subscription billing requires knowing your plan and payment status
• To send you transactional emails: booking confirmations, reminders, certification updates, and security alerts
• To keep the platform secure: IP addresses and login records help us detect suspicious activity
• To improve the platform: error logs and usage data help us identify and fix issues
• To respond to your enquiries: contact form submissions are used solely to reply to you

We do not sell your data. We do not use your data for advertising.

We only share your information with service providers that are needed to run the platform. We do not sell it, and we do not share it for marketing.

• Payment processing: Paystack handles your card details directly. We never see them. Paystack may process data outside South Africa under its own privacy policy.
• Hosting and infrastructure: providers that store and run the platform and its data
• Email delivery: a provider that sends our transactional emails, such as booking confirmations and verification emails
• Document storage: a provider that stores the documents and images you upload
• Monitoring: providers that help us find and fix errors and keep the service running

Some of these providers store data outside South Africa. Where that happens we make sure appropriate safeguards are in place, as POPIA requires. We may disclose your information if South African law or a valid court order requires it.

We use appropriate technical and organisational measures to protect your personal information against loss, misuse and unauthorised access. These include access controls, encryption, monitoring and regular review of our practices. We limit access to personal information to the people who need it, and we require the same care from the service providers we use.

No system is completely secure. If a security incident affects your personal information we will notify you and the Information Regulator as the law requires.

We keep your account data for as long as your account is active. If you are removed from your last workspace, your account is scheduled for permanent deletion after 10 days. You will receive an email notification with the deletion date and the option to join a new workspace to keep your account.

If you request deletion of your account directly, we will action it within a reasonable timeframe. Contact us at support@hlela.app.

Backup copies of data may persist for a short period after deletion as part of standard infrastructure backup practices. If a trial or subscription ends or lapses, workspace data is kept for 90 days and then permanently deleted. Payment and invoice records are kept for as long as South African tax and company law require, even after an account is deleted.

Under POPIA and general privacy principles, you have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: ask us to correct inaccurate information
• Deletion: request that we delete your personal information
• Objection: object to how we process your information in certain circumstances
• Complaint: lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at support@hlela.app.

We do not use advertising cookies, tracking pixels or cross-site tracking, and we do not use cookies to build a profile of you. We only use what is strictly necessary to keep the service working and to keep you signed in.

We may update this policy from time to time. When we make significant changes, we will notify active workspace owners by email. The "last updated" date at the top of this page always reflects the most recent version.

If you have any questions about this privacy policy or how we handle your data, please contact us:

• Email: support@hlela.app
• Company: The Triangle Corporation (Pty) Ltd t/a Hlela Workspace (Reg. 2026/328430/07)
• Address: 12 Mysori Avenue, Azaadville, Gauteng, 1750
• Information Officer: Imraan Patel, popia_info_officer@trianglecorp.co.za
• Regulator: Information Regulator of South Africa, justice.gov.za/inforeg