Privacy Policy

1. Introduction

GraceRock Global LLC, trading as GraceRock AI, is the entity responsible for this website and the contracting entity for GraceRock AI services unless a written agreement expressly states otherwise. We provide services internationally, including to South African clients, and this policy explains how we collect, use, disclose and protect personal information.

Where information relating to South African clients or data subjects is processed, we consider applicable South African privacy requirements, including the Protection of Personal Information Act (POPIA), alongside other laws that apply to the relevant processing.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Contact information (name, email address, phone number, company name)
• Business information (industry, company size, operational challenges)
• Technical information (IP address, browser type, device information)
• Usage data (pages visited, time spent on site, interaction patterns)
• Communication records (emails, chat logs, consultation notes)

2.2 Automated Data Collection

We use cookies and similar technologies to collect information about your browsing behaviour and preferences. This includes:

• Session cookies for website functionality
• Analytics cookies to understand user behaviour
• Marketing or advertising technologies where enabled and permitted

3. How We Use Your Information

We process your personal information for the following purposes:

• Providing AI automation and digital marketing services
• Responding to enquiries and providing customer support
• Conducting free automation audits and consultations
• Improving our services and developing new solutions
• Marketing communications (with your consent)
• Compliance with legal obligations
• Protecting our legitimate business interests

4. Legal Basis for Processing

We process your personal information based on:

• Consent: When you provide explicit consent for marketing communications
• Contract: To fulfil our service agreements with you
• Legitimate Interest: For business operations, fraud prevention, and service improvement
• Legal obligation: To comply with laws that apply to the relevant processing

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party vendors who assist in our operations (hosting, analytics, marketing platforms)
• Authorised operating partners: Digital 4 Jesus may process information as an authorised South African operating partner or service provider where required to deliver digital marketing, implementation and operational services.
• Legal requirements: When required by applicable law, court order or lawful request
• Business Transfers: In case of merger, acquisition, or asset sale

6. Data Security

We implement reasonable technical and organisational measures appropriate to the information and risks involved, including:

• Encryption and secure transport where supported by the relevant service
• Access controls and authentication systems
• Regular security assessments and updates
• Staff training on data protection
• Incident response procedures

7. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy or as required by law:

• Client and enquiry information: for as long as needed for the relevant relationship, service or legal obligation
• Marketing information: until consent is withdrawn or the information is no longer needed for the relevant purpose
• Analytics information: according to the settings of the relevant analytics provider and our operational needs
• Communication records: for as long as reasonably needed for support, dispute handling, security and record keeping

8. Your Rights

As a data subject, you have the right to:

• Access: Request copies of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Objection: Object to processing for direct marketing
• Restriction: Request limitation of processing
• Portability: Receive your data in a structured format
• Withdraw Consent: Withdraw consent at any time

9. International Data Transfers

GraceRock and its service providers may process information in the United States, South Africa and other countries. Cross-border processing may be needed to provide the website and services. We use contractual, technical, organisational or other safeguards appropriate to the transfer and applicable requirements.

Examples of safeguards may include:

• provider security and privacy commitments
• contractual transfer terms
• access controls and data minimisation
• consent or another lawful mechanism where required

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18 without parental consent.

11. Cookies Policy

Our website uses cookies to enhance your experience. You can control cookie settings through your browser preferences. Disabling certain cookies may limit website functionality.

12. Third-Party Links

Our website may contain links to third-party websites. This privacy policy does not apply to those sites. We encourage you to review their privacy policies.

13. Updates to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated through our website or direct notification. Your continued use of our services constitutes acceptance of the updated policy.

14. Privacy contact

For privacy questions or requests, contact GraceRock using the details below. We do not describe an individual as a formally appointed Information Officer for GraceRock Global LLC on this website.

15. Complaints

If you have concerns about our data processing practices, you may:

• Contact us at go@gracerock.ai so we can review the concern.
• Where applicable, contact the privacy or data protection regulator with jurisdiction over the relevant processing.

16. Contact Information

For privacy-related enquiries, please contact us: