DC Metric Privacy Policy

Last updated: 15 October 2026

1. Who we are

DC Metric is a web platform (the Platform) that helps data centre operators record and report their monthly energy, water and carbon figures. In this policy, we, us and DC Metric mean DC Metric (Pty) Ltd, registration number 2026/818904/07.

This policy explains what personal information we collect, why, who we share it with, and the choices you have. We follow the Protection of Personal Information Act 4 of 2013 (POPIA) and, where it applies to you, the EU General Data Protection Regulation.

Contact for privacy matters: info@dcmetric.co.za. Our Information Officer is Matthew Myburg.

2. Two roles, so you know who is responsible

Your account information. For the information we need to run your account on the Platform, such as your name, work email address and sign-in records, DC Metric is the responsible party (the party that decides why and how it is used). This policy describes how we handle it.

Your organisation’s data. The monthly figures, site and hall details, targets and other data your organisation enters into the Platform belong to your organisation. For any personal information inside that data, your organisation is the responsible party and DC Metric is its operator, handling it only on your organisation’s instructions (apart from what section 5 says about our hosting provider). Your organisation’s own privacy notice covers that part, and our agreement with it contains data processing terms.

3. What we collect

Account details: your name, work email address, job role, the organisation you belong to, and the role you have in the Platform.
Usage information: basic usage events, such as when you sign in and how long a session lasts, recorded by the Platform's provider to keep the Platform running and to understand how it is used.
Sign-in and security records: one-time verification codes sent to your email, login times, and records of changes made in the Platform, such as who edited or corrected a figure, when, and why.
Platform data you or your organisation enter: monthly energy, water and carbon figures for sites and halls, targets, and notes. This is mostly business data, and may include the names of people who enter or approve it.
API and integration data: figures sent to the Platform by a monitoring system your organisation connects.
Messages and support: emails you send us and the details you give us when you ask for help or book a demo.
Website visits: basic technical information such as your browser type and pages visited, held in server logs. We do not use advertising or tracking cookies.
Logos: if you upload a company or partner logo, we store it.

We do not knowingly collect personal information about children. The Platform is for business use by adults.

4. Why we use it

To create and run your account, send you invitations and sign-in codes, and let you use the Platform. We need this to perform our agreement with your organisation.
To keep the Platform secure, prevent misuse, and keep records of changes to figures. This is in our legitimate interest and in your organisation’s.
To support you and answer your questions.
To bill your organisation or its partner, and keep the records the law requires.
To improve the Platform, using combined figures that do not identify you or your organisation.
To tell you about important changes to the service. We send marketing emails only if you have asked for them, and you can stop them at any time.

We do not sell your personal information.

Your organisation. Its administrators can see the accounts and activity of its users.
Your partner, if you came to the Platform through one. A DC Metric partner that supplies the Platform to your organisation can see your organisation’s data and its users, to set it up and support you. Your organisation’s agreement with the partner covers this. The partner’s logo and name may appear in your sidebar, together with the words “Powered by DC Metric”.
Our service providers. We use third-party providers to host the Platform, store files, and send emails. Our hosting provider is Base44, whose servers are in the United States, and it processes information under its own data processing agreement. Base44’s terms for the plan we use allow it to use data stored on the Platform, including personal information, to train its own AI models, and we cannot currently opt out. We will update this policy if that changes, and we will try to move to an arrangement that excludes your data from AI training.
Professional advisers and authorities. Our accountants, lawyers and insurers, and public bodies or courts, where the law requires it.
A buyer of the business. If DC Metric is sold or merged, the information may transfer to the new owner, who must continue to protect it.

6. Where it is kept

The Platform is hosted by a third-party provider and your information may be stored or processed outside South Africa, in the United States of America. We only transfer information to places and providers that protect it to a standard that meets the law, or where the law otherwise permits it.

7. How long we keep it

We keep your account information while your organisation uses the Platform. When an agreement ends, your organisation can export its data for 30 days, and we delete it within 90 days afterwards, unless the law requires us to keep it longer. Records of changes to figures stay with your organisation’s data. We keep billing records for the period the law requires. Support emails are kept for as long as needed to help you and resolve any dispute.

8. How we protect it

We separate each organisation’s data from every other organisation’s, give people access only to what their role allows, require a one-time code to sign in, and record who changes figures. No system is completely secure. If a security incident affects your personal information, we will tell the organisation concerned and, where the law requires, the Information Regulator, as soon as reasonably possible.

9. Your rights

Under POPIA you may ask us to:

tell you whether we hold personal information about you, and give you a copy;
correct or delete information that is inaccurate, out of date, or that we should not be keeping;
stop using your information for a purpose you object to; and
withdraw your consent where we rely on it.

For information in your organisation’s data, please contact your organisation first, as it is the responsible party. We will help it respond. To use any right with us, write to info@dcmetric.co.za. We may ask you to confirm who you are first. If you are not happy with how we handle your request, you may complain to the Information Regulator of South Africa (inforegulator.org.za). If the GDPR applies to you, you have similar rights, and you may complain to your local data protection authority.

10. Cookies and similar tools

The Platform uses cookies and your browser's local storage for things that are needed for it to work: signing you in and keeping you signed in, and remembering basic settings such as which page you were on. We do not use advertising cookies, and we do not add Google Analytics or similar third-party tracking tools. The Platform's provider, Base44, runs basic usage analytics on the Platform (for example, session and activity events), which are sent to the Platform's own back end and used to understand how the Platform is used and to keep it running. You can clear the stored items at any time in your browser settings, but you will then need to sign in again.

11. Changes to this policy

We may update this policy. The date at the top shows the latest version. For significant changes we will notify your organisation or you by email or in the Platform.

12. Contact

Email: info@dcmetric.co.za