Privacy Policy

Last updated: 29 October 2026

Cde Guerilla ("we", "us") provides AI-assisted lead generation, sales and SEO services to clients in South Africa and internationally. This policy explains what personal information we collect, why, and your rights. We process personal information in line with South Africa's Protection of Personal Information Act (POPIA) and, for visitors from the EU/UK, the GDPR principles of lawfulness, purpose limitation and data minimisation.

What we collect

• Enquiries and checks: your name, email, phone/WhatsApp number, organisation, website address and any message you send us through our forms or the Free AI Visibility Check.
• Purchases: the details above plus the plan you chose and your payment reference. Card and PayPal payments are processed by PayPal; we never see or store your card number. EFT payments are made directly to our bank.
• Usage of public pages: first-party counts of page views, video plays, shares and enquiries on our public articles and pages. We also use Google Analytics to understand traffic and which pages lead to enquiries; Google signals and ad personalisation are switched off. We do not use advertising trackers on this site.
• Client campaign data: information our clients ask us to process on their behalf (for example leads collected on their campaign pages). For that data, the client is the responsible party and we act as their operator.

Why we use it

• To reply to your enquiry and send you the results you asked for.
• To deliver, invoice and support the services you buy.
• To follow up about our services. You can opt out at any time by replying STOP or telling us through the contact form.
• To keep our platform secure and to meet legal and tax obligations.

Who we share it with

We do not sell your personal information. We share it only with service providers that run our platform and payments (such as our hosting provider Netlify, PayPal, and the AI model providers used to draft content), under contracts that require them to protect it, and where the law requires us to.

How long we keep it

Enquiries we don't convert are kept for up to 24 months. Client and payment records are kept for as long as tax and accounting law requires (generally five years in South Africa).

Your rights

You may ask to see, correct or delete your personal information, object to direct marketing, or lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za). To make a request, use the contact form and we will respond within 30 days.

Security

Our back-office is private and access-controlled, with role-based permissions and an audit log. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.

International transfers

Our hosting and service providers may store data outside South Africa. We only use providers that offer an adequate level of protection.