Privacy Policy

Delphic Craft ("Delphic Craft", "we", "us", or "our") builds and operates websites, custom business systems, point-of-sale (POS) software, and SMS/messaging solutions for our clients and their customers. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices available to you when you interact with Delphic Craft, our websites, or systems we operate on behalf of our clients.

This policy applies to delphcf.com, any subdomains we operate, the systems and dashboards we build and host, and any SMS or messaging services sent through our platform.

1. Information we collect

We collect information in the following ways:

• Information you give us directly — such as your name, business name, email address, phone number, and project details, when you contact us, request a quote, or sign up to use a system we operate.
• Information collected through systems we build — when we build or operate a system for a client (for example a POS, booking platform, or customer dashboard), that system may collect operational data such as transaction records, customer names and phone numbers, staff login activity, and messages sent through the platform. This data is controlled by our client (the business using the system), and Delphic Craft processes it on their behalf.
• Technical and usage information — IP address, browser type, device information, pages visited, and approximate location, collected automatically when you use our websites or systems.
• Messaging information — when SMS, WhatsApp, or other messaging features are used, we process the phone number, message content, delivery status, and timestamps required to send and confirm delivery of messages.

2. How we use information

We use the information we collect to:

• Build, operate, host, and maintain websites and systems for our clients
• Process transactions and operational records within systems we build (e.g. POS sales, bookings, staff records)
• Send transactional and requested messages, including order confirmations, OTP verification codes, appointment reminders, and notifications
• Respond to enquiries, provide support, and communicate about projects
• Monitor, secure, and improve the performance and reliability of our websites and systems
• Meet legal, accounting, and regulatory obligations

We do not use information collected through client systems for our own marketing purposes without separate, explicit permission from the relevant business and, where required, the end user.

3. SMS & messaging data

Where Delphic Craft provides SMS or messaging services (including integrations with messaging providers such as Africa's Talking, Meta's WhatsApp Business Platform, or similar providers), the following applies:

• Phone numbers and message content are processed solely to deliver the requested message and confirm delivery status.
• Messages are sent only for purposes the recipient has reasonably consented to, such as order updates, appointment reminders, verification codes, or messages the recipient initiated.
• We do not sell phone numbers or message content to third parties.
• Recipients may opt out of non-essential SMS communications at any time by replying STOP, or by contacting the business that sent the message, or by contacting us directly using the details below.
• Message logs are retained only as long as necessary for delivery confirmation, billing, dispute resolution, and any legal retention requirements that apply to our clients.

4. How we share information

We do not sell personal information. We may share information with:

• Our clients — businesses for whom we build and operate systems receive the data their own system collects, since they are the operator of that system and data.
• Service providers — infrastructure, hosting, SMS gateway, payment, and messaging providers (such as Africa's Talking, Meta/WhatsApp, M-Pesa/Safaricom, and hosting providers) strictly to deliver the services requested.
• Legal and safety purposes — where required by law, regulation, court order, or to protect the rights, property, or safety of Delphic Craft, our clients, or others.
• Business transfers — if Delphic Craft is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

5. Cookies & tracking

Our websites may use cookies and similar technologies to keep you logged in, remember preferences, and understand how our site is used. You can control cookies through your browser settings; disabling cookies may affect some site functionality.

6. Data retention

We retain information for as long as necessary to provide our services, meet legal and accounting obligations, resolve disputes, and enforce our agreements. Operational data within client systems is retained according to the retention practices agreed with that client, who controls the data.

7. Security

We apply reasonable technical and organisational measures to protect information we process, including access controls, encrypted connections, and secure hosting practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights & choices

Depending on your location and the applicable law, you may have the right to:

• Request access to the personal information we or our clients hold about you
• Request correction of inaccurate information
• Request deletion of your information, subject to legal retention requirements
• Opt out of non-essential marketing or SMS communications
• Withdraw consent where processing is based on consent

If a specific business uses a system we built to collect your information, please contact that business first, as they control the data. You may also contact us directly using the details below and we will assist or direct your request appropriately.

9. Children's privacy

Our services are intended for businesses and individuals aged 18 and above. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The "last updated" date at the top of this page will reflect the most recent revision. Continued use of our websites or systems after changes take effect constitutes acceptance of the updated policy.

11. Contact us

If you have questions about this Privacy Policy or how your information is handled, contact us: