Effective Date: 1 April 2026
Last Updated: 3 April 2026
Responsible Party: CocoCorp (trading as COCOCORP)
Location: Midrand, Johannesburg, Gauteng, South Africa
Contact: +27 84 731 4960 | WhatsApp
CocoCorp is committed to protecting your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and all applicable data protection laws. This policy explains what information we collect, why we collect it, how we use it, and what your rights are.
1. Information We Collect
We collect personal information only when you voluntarily provide it or when it is automatically gathered through your use of our website. The types of information we collect include:
Information you provide directly: When you use our contact form or send us a message via WhatsApp, we collect your name, email address, business name (if provided), phone number, and the content of your message. When you apply for our Partner Program or Side Hustle program, we collect the same information plus any details you share about your background and goals.
Information collected automatically: When you visit our website, we use Google Analytics to collect anonymised usage data including your approximate location (country/region level, not precise), device type and browser, pages visited and time spent, referring website or search query, and interactions with site elements such as button clicks and form submissions. This data is aggregated and does not personally identify you.
Cookies and similar technologies: Our website uses cookies set by Google Analytics for usage tracking and by Dante AI for our chatbot functionality. You can decline cookies through the banner displayed on your first visit. Declining cookies disables Google Analytics tracking for your session. Essential cookies required for basic site functionality may still be used.
2. Purpose of Collection
We collect and process your personal information for the following purposes: to respond to your enquiries and provide the services you have requested, to communicate with you about your project, website, or AI services, to send you relevant updates about your account or active services (we do not send unsolicited marketing emails), to improve our website, services, and user experience based on anonymised analytics data, and to comply with legal obligations under South African law.
3. Legal Basis for Processing
Under POPIA, we process your personal information on the following legal grounds:
Consent: When you submit a contact form, send us a WhatsApp message, or accept cookies, you are giving us consent to process the information you provide for the stated purpose.
Legitimate interest: We use anonymised analytics data to understand how visitors use our website and to improve our services. This processing is based on our legitimate interest in operating and improving our business.
Contractual necessity: When you engage us to build a website, provide AI training, or deliver any other service, we process your information as necessary to fulfil that agreement.
4. How We Use Your Information
Your personal information is used solely for the purpose for which it was collected. We use contact form submissions and WhatsApp messages to respond to your enquiry and, if you become a client, to manage the delivery of your project. We use analytics data to understand which pages and services attract the most interest, to identify technical issues, and to improve site performance. We use chatbot interaction data to improve the accuracy and helpfulness of our AI assistant.
We do not sell, rent, or trade your personal information to any third party. We do not use your information for automated decision-making or profiling.
5. Third-Party Services
We use the following third-party services that may process data on our behalf:
Google Analytics (Google LLC): Collects anonymised website usage data. Google's privacy policy applies. Data is processed in accordance with Google's data processing terms and may be transferred to servers outside South Africa.
Dante AI: Powers our website chatbot. Conversations with the chatbot may be stored by Dante AI to improve response quality. Dante AI's privacy policy applies to chatbot interactions.
WhatsApp (Meta Platforms): Our primary communication channel. Messages sent to us via WhatsApp are subject to WhatsApp's privacy policy and end-to-end encryption.
All third-party services we use are selected with consideration for data protection standards. We do not share your personal information with any third party for their own marketing purposes.
6. Data Storage and Security
Contact form data is transmitted directly to WhatsApp and is not stored on our web server. Analytics data is stored by Google in accordance with their data retention policies. We retain client project information for the duration of our business relationship and for a reasonable period thereafter for record-keeping purposes.
We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or alteration. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Your Rights Under POPIA
As a data subject under POPIA, you have the following rights:
Right to access: You may request confirmation of whether we hold personal information about you, and if so, request a copy of that information.
Right to correction: You may request that we correct or update any personal information that is inaccurate, incomplete, or outdated.
Right to deletion: You may request that we delete your personal information where it is no longer necessary for the purpose for which it was collected, subject to any legal obligations that require us to retain it.
Right to object: You may object to the processing of your personal information on grounds relating to your particular situation.
Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, contact us via WhatsApp at +27 84 731 4960 or use the contact form on our website. We will respond to your request within a reasonable time and in any event within 30 days as required by POPIA.
8. Children's Information
Our services are directed at business owners and are not intended for children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.
9. Cross-Border Data Transfers
Some of the third-party services we use (Google Analytics, Dante AI, WhatsApp) may transfer data to servers located outside South Africa. Where such transfers occur, they are conducted in accordance with Section 72 of POPIA, which permits cross-border transfers where the recipient is subject to comparable data protection laws or binding agreements that provide adequate protection.
10. Information Officer
In accordance with POPIA, CocoCorp's designated Information Officer can be contacted for any queries or complaints regarding the processing of your personal information:
Information Officer: CocoCorp Management
Contact: +27 84 731 4960 (WhatsApp)
Location: Midrand, Johannesburg, South Africa
If you are not satisfied with our response to your query or complaint, you have the right to lodge a complaint with the Information Regulator of South Africa:
Information Regulator (South Africa)
Website: inforegulator.org.za
Email: complaints.IR@justice.gov.za
11. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, services, or legal requirements. The updated policy will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically.