Modblox MODBLOX
Request a demo

Privacy Policy

How we collect, use, and protect personal information when you visit modblox.co.za or use the Modblox platform.

Effective date: 17 September 2026

1. Who we are

This Privacy Policy explains how Cross Platform ("Cross Platform", "we", "us", or "our") processes personal information in connection with:

  • the Modblox marketing website at modblox.co.za (the "Website"); and
  • the Modblox managed platform deployed in customer environments (the "Platform").

Modblox is a product of Cross Platform. For privacy enquiries, contact us at info@modblox.co.za.

Under the Protection of Personal Information Act, 2013 (POPIA), Cross Platform is the responsible party for personal information collected through the Website. Where we process personal information on behalf of a Modblox customer within the Platform, we act as an operator and the customer remains the responsible party, as set out in the applicable commercial agreement.

2. Scope

This policy applies to personal information we collect through the Website and, at a high level, to personal information processed through the Platform. It does not replace the terms of any signed master services agreement, order form, data processing addendum, or other contract governing a customer's use of Modblox.

If you are a user of Modblox at a customer organisation, please contact your employer or Modblox administrator first for questions about account access, ERP data, or internal user records. We will assist customers with operator obligations where required by contract and law.

3. Information we collect

3.1 Website visitors

When you browse the Website, we may collect:

  • Technical and usage data such as IP address, browser type, device type, pages viewed, referring URL, and timestamps. This is collected automatically through web server and application logs for security, troubleshooting, and to keep the Website running reliably.
  • Website analytics through Matomo, operated by Cross Platform at https://analytics.crossplatform.co.za. Matomo may collect pages visited, time on page, link clicks, approximate location derived from IP address, device and browser information, and referrer URLs. We use this to understand how the Website is used and to improve it. We do not use Matomo for advertising or sell analytics data.
  • Theme preference stored locally in your browser (see Section 8 on cookies and similar technologies).

We do not use advertising trackers or social media pixels on the marketing Website.

3.2 Contact and demo enquiries

If you submit the contact form or otherwise request a demo, we collect the information you provide, which may include:

  • name;
  • company name;
  • email address;
  • phone number (optional);
  • area of interest; and
  • your message.

Enquiries are sent to our team by email and are not stored in a marketing-site database. They may remain in our email systems and related business records for as long as needed to respond and manage the relationship.

3.3 Modblox Platform users and customer data

When an organisation licenses Modblox, we process personal information needed to deliver, secure, and support the Platform. Depending on the modules enabled and the customer's configuration, this may include:

  • user account details such as name, username, email address, role, and authentication records;
  • activity and audit logs relating to Platform use;
  • support communications and configuration information; and
  • business and ERP-related data made available through the Data Gateway, which typically remains in the customer's own environment.

The categories of ERP and operational data processed through Modblox depend on the customer's systems, licensed modules, and integration settings. That processing is governed primarily by the customer's agreement with Cross Platform and, where applicable, by the customer as responsible party toward its own users.

4. How we use personal information

We use personal information for purposes including:

  • responding to enquiries and arranging demonstrations;
  • measuring and understanding use of the Website through privacy-oriented analytics;
  • providing, maintaining, securing, and improving the Website and Platform;
  • administering customer relationships, licensing, billing, and support;
  • monitoring for abuse, fraud, and security incidents;
  • complying with legal, regulatory, and contractual obligations; and
  • establishing, exercising, or defending legal claims.

We do not sell personal information.

5. Lawful bases for processing

We process personal information on one or more of the following bases:

  • Consent, where you submit a contact or demo request and agree to this Privacy Policy.
  • Contract, where processing is necessary to evaluate or perform our agreement with a customer or to take steps at your request before entering into a contract.
  • Legitimate interests, such as operating and securing the Website, measuring aggregated Website usage, improving our services, and communicating with prospective business customers, balanced against your rights.
  • Legal obligation, where we must retain or disclose information to comply with applicable law.

Where GDPR or similar laws apply and consent is relied upon, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Withdrawal may mean we cannot continue a conversation initiated through the Website.

6. Sharing and disclosures

We may share personal information with:

  • Service providers who help us host the Website, deliver email, provide infrastructure, or support operations. These providers may only use the information to perform services for us and must protect it appropriately.
  • Professional advisers such as lawyers, auditors, or insurers where reasonably necessary.
  • Authorities or other parties where required by law, court order, or to protect rights, safety, and security.
  • Business transfers in connection with a merger, acquisition, reorganisation, or sale of assets, subject to appropriate safeguards.

Because Modblox is deployed in customer-controlled environments, ERP and operational data accessed through the Platform generally remains within the customer's infrastructure unless expressly configured otherwise under the customer's agreement.

7. International transfers

Cross Platform is based in South Africa. We may use service providers or support personnel in other countries. Where personal information is transferred outside South Africa or, for individuals in the EEA, UK, or other jurisdictions with transfer restrictions, we implement appropriate safeguards such as contractual protections and access controls consistent with POPIA, GDPR, and applicable local requirements.

8. Cookies and similar technologies

We do not use advertising cookies on the marketing Website. Analytics are provided through Matomo, operated by Cross Platform. Depending on your browser and Matomo configuration, Matomo may store first-party analytics cookies (such as _pk_id and _pk_ses) or use similar identifiers to distinguish visits and measure Website usage.

We use the following technologies:

  • Strictly necessary cookies — Laravel session and CSRF cookies that enable secure form submission and site functionality. These cannot be switched off if you use interactive features such as the contact form.
  • Analytics cookies and identifiers — Matomo cookies or equivalent identifiers used to measure visits, page views, and interactions on the Website. You can opt out through your browser cookie settings or applicable Matomo opt-out mechanisms made available by Cross Platform.
  • Functional browser storage — a local preference for light or dark theme (flux.appearance in localStorage). This stores your display choice on your device and is not used for tracking or advertising.

You can control cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the Website from working correctly.

9. Retention

We retain personal information only for as long as reasonably necessary for the purposes described above, including:

  • Website enquiries: typically up to three years after the last meaningful contact, unless a longer period is needed for legal, tax, or contractual reasons.
  • Website analytics: according to the retention settings configured in Matomo, typically in aggregated form for operational reporting.
  • Server and security logs: usually for a limited rolling period appropriate to security monitoring and troubleshooting.
  • Platform and customer records: for the term of the customer relationship and thereafter as required by contract, law, or legitimate business needs such as dispute resolution.

When information is no longer needed, we delete it or de-identify it where appropriate.

10. Security

We apply administrative, technical, and organisational measures designed to protect personal information against unauthorised access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your rights

Depending on applicable law, including POPIA and GDPR where relevant, you may have the right to:

  • request confirmation of whether we hold personal information about you;
  • request access to a copy of your personal information;
  • request correction of inaccurate or incomplete information;
  • request deletion or restriction of processing in certain circumstances;
  • object to processing based on legitimate interests;
  • request portability of information you provided to us in a structured, commonly used format, where applicable; and
  • withdraw consent where processing is based on consent.

To exercise these rights, email info@modblox.co.za. We may need to verify your identity before responding. If you are a Platform user employed by or contracted to a Modblox customer, we may redirect certain requests to that customer where they act as responsible party.

Complaints

If you believe we have handled your personal information unlawfully, you may lodge a complaint with the Information Regulator (South Africa): inforegulator.org.za. Individuals in the EEA or UK may also complain to their local supervisory authority.

12. Children

The Website and Modblox business services are not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will change when we do. Material changes will be posted on the Website. Continued use of the Website after an update constitutes notice of the revised policy.

14. Contact

Cross Platform
South Africa
Privacy enquiries: info@modblox.co.za
Information Officer: info@modblox.co.za