LEGAL

Privacy Policy

Jurisdiction: Republic of South Africa.

TESSERA respects the privacy of Clients, prospective Clients and website visitors.

This Policy explains how personal information may be collected, used, stored and protected in connection with the TESSERA website and professional services.

1. Responsible party details

Trading name: TESSERA
Responsible party / proprietor: TESSERA
Business address: 138 Bellairs Drive, Northriding, Randburg, Johannesburg, Gauteng, South Africa, 2169
Privacy contact: Support / info
Email: info@tessera.web.za
Website: tessera.web.za

2. Personal information we may collect

Depending on how a person interacts with TESSERA, information may include:

  • name and surname;
  • business / trading name;
  • job title or role;
  • email address;
  • telephone number;
  • billing details;
  • business address;
  • website / Shopify store details;
  • enquiry and project information;
  • correspondence;
  • accepted proposals and project records;
  • invoice and payment records;
  • technical support information;
  • access information supplied for an agreed project;
  • analytics and website-use information;
  • information submitted through forms.

TESSERA does not intentionally request unnecessary sensitive personal information.

3. Why information is processed

Personal information may be used to:

  • respond to enquiries;
  • assess project fit;
  • prepare proposals or quotations;
  • enter into and administer Client engagements;
  • provide agreed Shopify, website, ecommerce and support services;
  • obtain authorised access to Client systems where required;
  • communicate about projects, approvals, dependencies and support;
  • issue and administer invoices and payments;
  • keep business, contractual and project records;
  • protect account and information security;
  • comply with applicable law;
  • manage website performance and analytics;
  • send marketing communications where permitted.

TESSERA will not use personal information for an unrelated purpose without an appropriate basis.

4. Client system and access information

Where TESSERA requires access to a Client's Shopify store or another platform, delegated, collaborator or role-based access is preferred.

TESSERA does not require a Client's master Shopify password where collaborator or delegated access is available.

Where credentials must temporarily be shared because a third-party service does not support delegated access:

  • access should be limited to what is reasonably necessary;
  • credentials should be shared through a reasonably secure channel;
  • credentials should not be placed unnecessarily in project documents;
  • credentials should not be reused;
  • access should be removed or returned when no longer required;
  • password rotation may be recommended where appropriate.

5. How TESSERA uses Client information

TESSERA may access or use Client information only to the extent reasonably necessary to perform the agreed work, including where required to:

  • obtain authorised access;
  • configure a Client's Shopify store or connected services;
  • diagnose an issue;
  • implement approved work;
  • test and perform QA;
  • complete handover;
  • provide contracted support.

TESSERA does not sell Client information and does not share it for unrelated purposes.

TESSERA does not routinely outsource Client work.

If an external specialist is ever genuinely required and would need access to confidential or personal information, Client approval should normally be obtained before that access is granted, unless disclosure is required by law.

6. Sharing of information

Information may be disclosed where reasonably necessary to:

  • the Client's own technology or service provider for an approved project purpose;
  • Shopify or another platform used by the Client;
  • payment, accounting or banking providers used to administer TESSERA's own business transactions;
  • professional advisers or authorities where disclosure is legally required or reasonably necessary to protect legal rights;
  • an approved specialist where the Client has authorised relevant access.

TESSERA does not sell personal information to advertisers or data brokers.

7. Cross-border processing

Some technology providers used by TESSERA or a Client may process or store information outside South Africa. This includes Shopify and its service providers; Shopify currently displays the United States as the data hosting location for this store.

Where this occurs, TESSERA will use reputable services and apply the safeguards reasonably available within the relevant service relationship.

Client-selected third-party services remain subject to their own privacy practices and terms.

8. Information security

TESSERA takes reasonable technical and organisational steps appropriate to the nature of the information handled.

These may include:

  • limited account permissions;
  • collaborator / delegated access;
  • role-based access;
  • password protection;
  • device and account security;
  • restricted disclosure;
  • removal of unnecessary access;
  • careful handling of project records.

No internet-based system can be guaranteed to be completely secure.

If TESSERA has reasonable grounds to believe that personal information processed for a Client has been accessed or acquired by an unauthorised person, TESSERA will act in accordance with applicable legal obligations and notify the affected Client where required.

9. Retention

TESSERA keeps personal information only for as long as reasonably required for:

  • the purpose for which it was collected;
  • project administration;
  • contractual records;
  • invoicing and financial records;
  • dispute / audit trails;
  • legal or regulatory obligations;
  • legitimate business recordkeeping.

Access credentials should not be retained longer than reasonably required for the engagement.

Information that is no longer required should be securely deleted, de-identified or otherwise disposed of where appropriate.

10. Website analytics, cookies and similar technologies

The TESSERA website is hosted by Shopify. Shopify processes personal information to provide and secure its platform and services. Shopify Network Intelligence is enabled for this store. Shopify may use information from interactions with TESSERA together with interactions with Shopify and other Shopify merchants to provide enhanced services, including analytics, personalisation and advertising-related services. Learn more about Shopify's processing and available privacy choices in the Shopify Consumer Privacy Policy and Shopify privacy portal. TESSERA privacy enquiries may be sent to Marius Buys at info@tessera.web.za.

The TESSERA website may use cookies or similar technologies required for:

  • website operation;
  • security;
  • remembering settings;
  • analytics;
  • performance measurement;
  • enquiry / conversion measurement;
  • marketing measurement where enabled.

Questions about website cookies or similar technologies may be directed to the privacy contact at info@tessera.web.za.

Where a non-essential technology requires consent under applicable law or TESSERA's chosen implementation standard, the website should provide an appropriate choice before activating that technology.

11. Marketing communications

TESSERA may communicate with existing or prospective Clients about services where there is an appropriate lawful basis.

Recipients may opt out of marketing communications using the unsubscribe method provided or by contacting TESSERA.

Operational communications relating to an enquiry, active project, invoice, support request or contractual matter are not treated as optional marketing messages.

12. Rights of data subjects

Subject to applicable law, a person may request:

  • confirmation of whether TESSERA holds personal information about them;
  • access to relevant personal information;
  • correction or updating of inaccurate information;
  • deletion or destruction where legally appropriate;
  • objection to certain processing;
  • withdrawal of consent where processing is based on consent.

TESSERA may require reasonable verification of identity before actioning a request.

Requests may be sent to:

Privacy contact: Marius Buys
Email: info@tessera.web.za

13. Complaints

A person who believes that personal information has not been handled appropriately should first contact TESSERA so that the matter can be investigated.

A complaint may also be submitted to the Information Regulator (South Africa) through its official channels.

14. PAIA access requests

Requests for access to records held by TESSERA may be directed to the privacy contact at info@tessera.web.za. Applicable requests will be handled in accordance with South African law.

15. Third-party websites

The TESSERA website may contain links to third-party websites or services.

TESSERA is not responsible for the privacy practices, security or content of an independent third-party service.

16. Changes to this Policy

This Policy may be updated as TESSERA's website, systems or legal obligations change.

The current version will be published on the TESSERA website with its last-updated date.

17. Contact

TESSERA
Privacy contact: Marius Buys
Email: info@tessera.web.za
Telephone: 068 799 1198
Address: 138 Bellairs Drive, Northriding, Randburg, Johannesburg, Gauteng, South Africa, 2169

Last updated: 29 September 2026