Last updated 14 October 2026
Privacy notice
We collect as little personal information as we can, use it only to work with you, and never sell it. This notice explains what we collect, why, and the choices you have under POPIA.
01Who we are
GetItDone is a trading name of Vatatu Technologies (Pty) Ltd, a software company based in Gauteng, South Africa. In this notice, “GetItDone”, “we” and “us” mean that company. We are the responsible party under the Protection of Personal Information Act, 2013 (POPIA) for the personal information described here.
Our Information Officer can be reached at hello@vatatu.co.za.
02What we collect
- When you fill in our project form: the type of project, your timeline and budget range, your name, email address, phone number, company and any details you choose to share.
- When you message us on WhatsApp: your phone number, WhatsApp name and what you tell us.
- How you found us: the page you landed on, the referring website, and campaign or ad-click identifiers in the link you followed (for example
utm_sourceorgclid). We keep these with your enquiry so we know which adverts work. - Website usage: if analytics or advertising tags are active (see “Cookies”), how you use the site, such as pages viewed and buttons clicked.
03Why we use it
- To reply to your enquiry and arrange a blueprint call.
- To prepare plans, quotes and contracts, and to deliver the work you hire us for.
- To measure and improve our website and advertising.
- To meet our legal, tax and accounting obligations.
We process personal information because you consented to it, because it is needed to take steps towards a contract with you, because the law requires it, or because it is in our legitimate interest to respond to and keep track of business enquiries (POPIA section 11).
04Direct marketing
We only contact you about the enquiry you sent us. We will not add you to marketing lists without your consent, and you can ask us to stop contacting you at any time by replying “stop” or emailing hello@vatatu.co.za.
06Information stored outside South Africa
Some of our service providers, including our hosting, database, email and analytics providers, store data on servers in the United States, Europe or elsewhere. We use providers that are bound by data-protection laws, binding agreements or terms giving a level of protection substantially similar to POPIA, as section 72 requires.
07How long we keep it
We keep enquiries for up to 24 months after our last contact with you, unless you become a client. Client records are kept for as long as the contract runs and afterwards for as long as tax and company law require (usually 5 years). After that, we delete or anonymise the information.
08How we protect it
Access is limited to the people who need it and requires a personal sign-in. Data is encrypted in transit, and our providers encrypt stored data. If we have reason to believe your information was accessed without authorisation, we will notify you and the Information Regulator as POPIA requires.
10Your rights
Under POPIA you may:
- ask whether we hold personal information about you, and for a copy of it;
- ask us to correct or delete it;
- object to us processing it, including for direct marketing;
- withdraw your consent at any time;
- complain to the Information Regulator (inforegulator.org.za).
To use any of these rights, email hello@vatatu.co.za. We will reply within a reasonable time, usually within 30 days.
11Software we build for clients
When we build or run software for a client, the client is the responsible party for the people using it, and we act as their operator under a written agreement. The client's own privacy notice explains how that information is used.
12Changes to this notice
We will update this page when our practices change. The date at the top shows the latest version.