PRIVACY POLICY: GTW SOFTWARE TECHNOLOGIES

Last Updated: 2026-04-05

1. INTRODUCTION

Welcome to the GTW Software Technologies ecosystem. We provide high-trust SaaS (Software as a Service) solutions, including JustXhale, ChurchAnywhere, and GeneTree Grave Archives. 

Your privacy is a fundamental right. This policy explains how Lourens J Botha t/a GTW Software Technologies (the “Provider,” “we,” or “us”) collects, uses, and protects your personal information in accordance with the Protection of Personal Information Act (POPIA).

2. OUR ROLE: OPERATOR VS. RESPONSIBLE PARTY

*   As a Visitor/Subscriber: When you visit our websites or subscribe to our services, we are the “Responsible Party.”
*   As a Platform Provider: When you (a Professional Client) upload data about your clients/members into our tools (e.g., JustXhale or ChurchAnywhere), we act as the “Operator.” In these cases, you are the Responsible Party, and our processing is governed by our Data Processing Agreement (DPA).

3. WHAT INFORMATION DO WE COLLECT?

We collect information necessary to provide our services, including:

*   Account Data: Name, email, telephone number, and professional designation.
*   Financial Data: Billing details and transaction history (processed via secure, PCI-compliant payment gateways).
*   Technical Data: IP addresses, cookies, and usage logs to ensure platform security and performance.
*   Special Data: Religious affiliation (only via the ChurchAnywhere platform) and genealogical history (via GeneTree Grave Archives).

4. HOW WE USE YOUR INFORMATION

We use your data strictly to:

*   Provide and improve our software platforms.
*   Manage your subscription and billing.
*   Communicate technical updates or security alerts.
*   Comply with South African legal and tax obligations.

5. DATA RESIDENCY & SECURITY

*   Local Hosting: Your primary data resides on secure servers in Johannesburg, South Africa (Domains.co.za / Teraco).
*   Global Resilience: Encrypted backups and document objects are stored via Backblaze B2 (USA). This data is encrypted before it leaves South Africa, ensuring no unauthorized access by international third parties.
*   Standards: We employ AES-256 encryption, Multi-Factor Authentication (MFA), and a “Zero-Standing Access” (Ghost Rule) protocol.

6. YOUR RIGHTS (POPIA SECTION 23-25)

You have the right to:

1.  Request access to the personal information we hold about you.
2.  Request the correction or deletion of inaccurate or outdated data.
3.  Object to the processing of your data for marketing purposes.

7. THIRD-PARTY DISCLOSURE

We do not sell your data. We only share information with essential sub-processors (like Cloudflare for security or Backblaze for storage) under strict confidentiality agreements.

8. CONTACT OUR INFORMATION OFFICER

For any privacy-related inquiries or to exercise your rights, please contact:

*   Information Officer: Lourens J Botha
*   Regulator Registration No: 2026-005668
*   Email: info@grabtheweb.click

If you are unsatisfied with our response, you have the right to complain to the Information Regulator of South Africa at inforegulator.org.za (https://inforegulator.org.za).