BEYOND ONE
Privacy notice.
Updated 3 November 2026
Information you share
When you send an enquiry, we receive the name, email address, company and message you choose to provide. We use these details to respond and manage the requested business communication.
Smart Link activity
The Beyond One NFC Writer app sends the destination details you choose and the tag’s hardware identifier to this workspace to provision a permanent Smart Link. App-written tokens use anonymous visit counts and open without a visitor-consent interstitial. Contact cards are public to anyone with their link. Programming a tag is logged as an administrative action; it does not count as a customer visit. Passwords are not saved by the app; its session is encrypted on the device. Local drafts can be cleared in the app.
Opening a Beyond One smart link records its link, tag and business identifiers, the time, broad device, operating system and browser categories, configured campaign and channel, and the referral hostname when available. We keep link visits separate from button clicks. A redirect does not prove that an app opened, a message was sent or a purchase occurred. A URL request cannot itself distinguish NFC from QR; dedicated URLs provide channel attribution.
Raw IP addresses, full browser identifiers, referral paths, precise GPS coordinates and device fingerprints are not stored in analytics. Short-lived keyed representations of network addresses help identify excessive traffic. Tracking-rate records expire after two minutes and are removed during daily maintenance. Failed password attempts are rate limited for 15 minutes. Known bots are classified separately. Geographic information is shown only where a trusted integration provides it.
Visitor estimates and consent
Anonymous visit counting is the default. When a business enables returning-visitor estimates, we ask before using an optional browser identifier. Accepting stores a signed, random, business-specific identifier in a secure cookie for 30 days. Declining stores your preference for the same period. Clearing these cookies lets you change or withdraw that choice. Global Privacy Control and Do Not Track disable optional identification. Estimates describe consenting browsers, not verified individual people.
Retention and access
Raw Smart Link events are retained for 90 days by default; the platform administrator may configure 7–365 days. Daily anonymous totals support historical reporting. Administrative audit records are retained for up to one year. Anyone with the shared workspace password can manage every business, link and report. We store a password hash and hashed temporary session identifiers, not the plaintext password. A secure, essential sign-in cookie expires after 12 hours. Changing the password revokes other sessions. Actions using shared access are recorded as shared-password activity.
Service providers
Our hosting, authentication, database and email providers process information needed to deliver these services. Processing may take place outside South Africa. Each business using Smart Links must assess its lawful basis, service-provider arrangements and any additional notices required for its use. We do not sell personal information.
Your choices and requests
Contact info@beyondone.co.za to request access, correction or deletion, or to ask about processing, retention or your POPIA rights. We may need to verify your request and retain information where a legal record-keeping obligation applies.