This policy explains how Tristyn Spies, trading as Block Logic ("we", "us"), which provides Block Logic, handles personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Our role

Block Logic is software that estates, body corporates, homeowners' associations and their managing agents use to keep their records. For information an estate puts into Block Logic (for example details of owners, tenants, vehicles and contractors), the estate is the responsible party and we are its operator. We process that information only on the estate's instructions and under our agreement with it.

For information about the people who contact us, book a demo or hold a login, we are the responsible party.

2. Information Officer

Our Information Officer is Tristyn Spies, who can be reached at tristynspies.dev@gmail.com.

3. What we collect

Account holders (estate staff, trustees, managing agents and contractors): name, email address, login details and which estate you belong to, plus a record of actions taken in the app (for example who created or changed a work order).
Information an estate records: owners', tenants' and agents' names, email addresses, phone numbers and dates of birth; the units they are linked to; vehicle make, model, colour and registration; parking bays and exclusive use areas; issues, complaints and notes, including any photos attached; and contractor details and work orders.
People who contact us or request a demo: the name, role, estate or company, email address, contact number, number of units, preferred demo time and message you submit through our contact form, or whatever you include if you email us directly. We use these details only to respond to your enquiry and arrange a demonstration.
Technical information: server logs (IP address, browser, pages requested) kept by our hosting providers for security and troubleshooting.

4. Why we use it

To provide Block Logic to the estate, including sign-in and access control.
To send the emails the estate asks for, such as notifying the managing agent about an issue.
To keep the service secure, fix problems and prevent misuse.
To reply to enquiries and arrange demos.

We rely on the estate's instructions and our contract with it, the estate's own lawful grounds for keeping these records (such as managing the scheme under the Sectional Titles Schemes Management Act and its rules), and our legitimate interest in running a secure service. We do not sell personal information or use it for advertising.

5. Who we share it with

We use these service providers (sub-operators) to run Block Logic:

Supabase: database, file storage and authentication.
Vercel: website and application hosting.
Resend: emails sent from the app, such as issue notifications.
Brevo: sign-in and password reset emails.

We may also disclose information where the law requires it. Within an estate, what a person can see depends on the access the estate gives them; contractors only see the work assigned to them.

6. Information stored outside South Africa

Some of these providers store or process information outside South Africa, including in the United States and the European Union. Where that happens, we rely on section 72 of POPIA: the providers are bound by contract and by data protection laws that give a level of protection similar to POPIA.

7. Cookies

We only use cookies needed to keep you signed in. Your light or dark theme choice is saved in your browser. We do not use advertising or analytics cookies.

8. How we protect it

Information is encrypted in transit, each estate's data is kept separate using database row-level security, photos are stored privately and shared only through short-lived links, and access is limited to people who need it. If we become aware of a security compromise affecting personal information, we will notify the estate, and we or the estate will notify the Information Regulator and the people affected, as section 22 of POPIA requires.

9. How long we keep it

We keep an estate's information for as long as the estate uses Block Logic. When the estate's agreement ends, we give the estate the chance to export its records and then delete them within 60 days, except where the law requires us to keep something longer. Backups are overwritten on a rolling basis.

10. Your rights

Under POPIA you may ask to:

see the personal information held about you;
have it corrected or deleted;
object to it being processed.

If you are a resident, owner or tenant, your estate controls your record, so please contact your estate or managing agent first. You can also write to us at tristynspies.dev@gmail.com and we will help or pass your request to the estate.

If you are unhappy with how your information has been handled, you may complain to the Information Regulator: inforegulator.org.za.

11. Changes

We may update this policy. The date at the top shows when it last changed, and we will tell estates about significant changes.