1. Who we are

This website is run by BlueBird Digital (Pty) Ltd (registration number 2020/844054/07), 479 Kincardine Estate, 156 Zinnia Road, Kyalami, Gauteng, 2196, South Africa ("BlueBird Digital", "we", "us"). We are an AI consultancy and we build and run Tallify, software for financial advice practices (tallify.co.za). Our Information Officer is Michael Warren Eales, reachable at Michael@bluebirddigital.co.za.

2. This website

When you use the contact or booking form we receive what you type: your name, work email, company, industry and a description of the process you want help with. The form sends it to us by email through our own workflow server so that we can reply. We use it only to answer you and to follow up on your enquiry, and we do not add you to a mailing list.

Our hosting provider keeps standard request logs (IP address, pages requested, time) for security, for no more than 90 days. Fonts are loaded from Google Fonts, so Google receives your IP address when a page loads. The WhatsApp link opens WhatsApp, where Meta's own terms apply. We do not use analytics cookies, advertising trackers or embedded social media.

3. Tallify and the WhatsApp Business Platform

Financial advice practices that use Tallify can connect their own WhatsApp Business number to it. Messages and documents that the practice's clients and advisers send to that number (for example a completed fact find or a question about a policy) are received through Meta's WhatsApp Business Platform and shown to that practice's staff in its Tallify dashboard. Replies and approved template messages (such as a welcome message or a birthday greeting) are sent from the practice's own number. The practice approves every outgoing message before it is sent.

For this information the practice is the responsible party under POPIA and we act as its operator under a written agreement, processing it only on the practice's instructions. Each practice's messages are kept only for that practice, in South Africa. They are never sold, shared with other practices or used for advertising. Where Tallify suggests a reply, it sends a de-identified set of facts (no names, identity numbers or contact details) to its language model provider, Anthropic PBC. The full Tallify privacy notice is at tallify.co.za/privacy.html.

4. Who else is involved

Our website hosting provider; Google (fonts); Meta Platforms and Twilio Inc. (WhatsApp messages); GoDaddy Operating Company, LLC (email); Anthropic PBC (de-identified drafting only); and, for Tallify deployments reachable over the internet, Cloudflare, Inc. (network security). Each receives only what it needs for its part of the service.

5. Retention and security

We keep enquiries for as long as we need them to respond and follow up, then delete them. Information processed for a practice is kept and deleted on that practice's instructions and in line with the FAIS record-keeping rules. Access is restricted to authorised people, traffic is encrypted in transit and practice data is stored on encrypted disks.

6. Your rights and deleting your data

Under POPIA you may ask for access to, correction of or deletion of personal information we hold about you, and you may object to its processing. To do so, email Michael@bluebirddigital.co.za with the subject "Data request"; we respond within 30 days. If your information is held by a practice that uses Tallify (including your WhatsApp messages to that practice), contact the practice directly, or ask us and we will pass your request on. You may also complain to the Information Regulator at inforegulator.org.za.

7. Changes

We will post any change to this policy on this page with a new effective date.