Privacy Policy

Service: Fulnex
Operated by: Rudi van Buuren (sole proprietor, trading as Fulnex)
Jurisdiction: Western Cape, South Africa
General contact: hello@fulnex.cloud
Information Officer: Rudi van Buuren — rudivbuuren@gmail.com

If you have questions about this policy or wish to exercise your rights under POPIA, contact our Information Officer using the email above. We aim to respond to all inquiries within 5 business days.

2.1 Account Information

• Full name
• Email address
• Business name
• Phone number (optional)
• Password (encrypted using bcrypt, never stored in plain text)

2.2 Billing Information

• Subscription plan and status
• Payment status (we do not store credit card details — these are handled exclusively by PayFast)
• Transaction history and invoice records

2.3 Service Usage Data

• WooCommerce store credentials (encrypted at rest)
• Order data synced from your connected stores (customer details, addresses, order contents)
• Stock levels, pick lists, warehouse activity
• Login times and session activity
• IP address and browser type

2.4 Communication Data

• Support emails and feedback submissions
• Marketing email preferences (you can opt out at any time)

We process your personal information for the following lawful purposes under POPIA:

We share your data only with the following sub-processors:

We do not sell your personal information. We do not share your data with advertising networks or data brokers.

Cross-Border Transfers

Some sub-processors are based outside South Africa. We ensure each receiving country has adequate data protection laws, or that the processor has signed contractual safeguards equivalent to POPIA standards (e.g. Standard Contractual Clauses).

After the retention period, data is permanently deleted or anonymised.

You have the following rights regarding your personal information:

• Right to Access: Request a copy of all data we hold about you. We respond within 30 days.
• Right to Correction: Update incorrect information directly in your account or by emailing us.
• Right to Deletion: Request account deletion (subject to legal retention obligations).
• Right to Object: Opt out of marketing communications at any time.
• Right to Data Portability: Export your data in CSV/JSON format.
• Right to Lodge a Complaint: Contact the SA Information Regulator if you believe we have mishandled your data.

To exercise these rights, email hello@fulnex.cloud with "Account [Action]" as the subject.

Technical Measures

• All data encrypted in transit (TLS 1.2+) and at rest (AES-256)
• Passwords hashed using bcrypt
• Multi-tenant data isolation via Postgres Row Level Security (RLS)
• Automatic backups with point-in-time recovery
• Limited internal access on a need-to-know basis

Breach Notification

In the event of a data breach affecting your personal information, we will notify you and the Information Regulator within 72 hours of becoming aware, in accordance with POPIA Section 22.

We use only essential cookies (session, preferences, and anonymous analytics). We do not use third-party advertising or tracking cookies. You can disable optional cookies in your browser settings without affecting core Service functionality.

The Service is not intended for users under 18 years of age. We do not knowingly collect data from children. If you believe we have collected data from a minor, please contact us immediately.

We may update this Privacy Policy from time to time. Material changes will be communicated via email and a notification in the Service dashboard. The "Last updated" date at the top reflects the most recent revision.

For any questions, requests, or complaints regarding this Privacy Policy or your personal information:

General: hello@fulnex.cloud
Information Officer: rudivbuuren@gmail.com