Privacy Policy

How Delta Hydro collects, uses, and protects your personal information. We are committed to safeguarding your privacy in compliance with South Africa's Protection of Personal Information Act (POPIA).

Last updated: April 2026

1. Introduction

Delta Hydro ("we", "us", or "our") operates the website deltahydro.tech and the web application studio.deltahydro.tech (collectively referred to as the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our application.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms of this policy, please do not access the Services.

2. Information We Collect

We collect information that you provide directly to us, as well as information that is collected automatically when you use our Services.

2.1 Personal Information You Provide

When you register for an account, submit a contact form, or interact with our Services, we may collect the following personal information:

  • Full name — to identify you and personalise your experience
  • Email address — for account authentication, communication, and service notifications
  • Company or organisation name — to understand your professional context and tailor our services
  • Phone number — if provided via our contact form, for follow-up communication
  • Enquiry details and messages — the content of any messages you send through our contact forms

2.2 Information Collected Automatically

When you access our Services, we may automatically collect certain information about your device and usage, including:

  • Usage data — pages visited, features used, tools accessed, time spent on pages, and interaction patterns
  • Device information — browser type, operating system, screen resolution, and device type
  • IP address — used for security purposes, approximate geolocation, and analytics
  • Referral data — the website or source that directed you to our Services
  • Cookies and similar technologies — as described in our Cookie Policy

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Providing and maintaining our Services — to operate our website and application, process your requests, and deliver the engineering tools you use
  • Account management — to create and manage your user account, authenticate your identity, and manage your credits and subscriptions
  • Communication — to respond to your enquiries, send service-related notifications, and provide technical support
  • Service improvement — to analyse usage patterns, identify areas for improvement, and develop new features and tools
  • Security — to detect, prevent, and address technical issues, fraud, and unauthorised access
  • Legal compliance — to comply with applicable laws, regulations, and legal processes

We do not sell your personal information to third parties. We do not use your personal information for automated decision-making or profiling that produces legal effects.

4. Data Storage and Security

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

  • Encryption — all data transmitted between your browser and our servers is encrypted using TLS/SSL protocols
  • Secure infrastructure — our application and databases are hosted on secure, professionally managed cloud infrastructure with regular security updates and monitoring
  • Access controls — access to personal information is restricted to authorised personnel who require it to operate, develop, or improve our Services
  • Authentication security — user passwords are securely hashed and never stored in plain text

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents in accordance with applicable law.

5. Third-Party Services

We use a limited number of trusted third-party services to operate and improve our platform. These services may have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

  • Neon Auth — we use Neon for database services and authentication infrastructure. Your account credentials and profile data are processed through their secure systems. Neon's privacy practices are governed by their own privacy policy.
  • Resend — we use Resend as our transactional email service provider. When we send you account verification emails, password resets, or service notifications, your email address and name are shared with Resend to facilitate delivery.
  • Paddle — we use Paddle as our merchant of record for global payments. When you purchase a subscription or credit pack, Paddle processes your payment and may collect billing information as part of its checkout flow. Paddle's privacy practices are governed by their own privacy policy.

We carefully evaluate all third-party service providers to ensure they maintain appropriate data protection standards. We do not share your personal information with third parties for their own marketing purposes.

6. Cookies and Tracking

Our website and application use cookies and similar tracking technologies to enhance your experience, analyse usage, and support core functionality.

  • Essential cookies — required for the basic operation of our Services, including session management and authentication. These cannot be disabled.
  • Analytics cookies — help us understand how visitors interact with our website by collecting and reporting information anonymously. This data assists us in improving the design and functionality of our Services.
  • Preference cookies — enable our Services to remember your settings and choices, such as language preferences or display options.

For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

7. Your Rights Under POPIA

As a South African company, Delta Hydro is committed to compliance with the Protection of Personal Information Act, 2013 (POPIA). Under POPIA, you have the following rights regarding your personal information:

  • Right to be informed — you have the right to know what personal information we hold about you and how it is being used
  • Right of access — you may request a copy of the personal information we hold about you
  • Right to correction — you may request that we correct or update any inaccurate or incomplete personal information
  • Right to deletion — you may request that we delete your personal information, subject to any legal obligations that require us to retain certain data
  • Right to object — you may object to the processing of your personal information in certain circumstances, including for direct marketing purposes
  • Right to data portability — you may request that your personal information be provided to you in a structured, commonly used, and machine-readable format
  • Right to withdraw consent — where processing is based on your consent, you have the right to withdraw that consent at any time
  • Right to lodge a complaint — you have the right to lodge a complaint with the Information Regulator of South Africa if you believe your personal information has been unlawfully processed

To exercise any of these rights, please contact us using the details provided in Section 10 below. We will respond to your request within a reasonable time and in accordance with POPIA requirements.

8. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

  • Active accounts — your personal information is retained for the duration that your account remains active
  • Closed accounts — upon account deletion, we will remove or anonymise your personal information within 90 days, except where retention is required by law
  • Contact form submissions — enquiry data is retained for up to 24 months to maintain a record of our communications
  • Usage data and analytics — anonymised usage data may be retained indefinitely for statistical analysis and service improvement purposes
  • Legal requirements — certain information may be retained for longer periods where required by applicable law, regulation, or legitimate business purposes such as dispute resolution

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our Services, or applicable laws. When we make material changes to this policy, we will notify you by:

  • Posting the updated policy on this page with a revised "Last updated" date
  • Sending an email notification to registered users for significant changes that affect how we process personal information

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after the posting of changes constitutes your acceptance of those changes.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For privacy-specific requests, including exercising your rights under POPIA, please email legal@deltahydro.tech with the subject line "Privacy Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 days.