This Privacy Policy explains how Elegant Work Group ("we", "us", "our") collects, uses, and protects information when you use the Yoco for GoHighLevel payment integration (the "Service").
By installing, connecting, or using the Service, you agree to the practices described below.
Who we are
The Service is operated by Elegant Work Group, an industrial software company based in Mbombela, Mpumalanga, South Africa. For any privacy questions, contact us via our Contact page.
Information we collect
Information you provide
- Account and business details such as your name, business name, and email address when you connect the Service or contact us for support.
- Integration credentials — your Yoco API keys and the GoHighLevel authorisation (OAuth) granted during installation. Yoco API keys are encrypted at rest and used only to process payments on your behalf.
Information collected automatically
- Transaction metadata — amounts, currency, order and transaction identifiers, and payment status — recorded so payments can be reconciled and orders marked paid.
- Technical and usage data — such as IP address, browser type, and event logs, used for security, troubleshooting, and fraud prevention.
Cardholder data
We do not collect, process, or store cardholder data. All card details are entered on Yoco's secure, PCI-DSS compliant checkout and never reach our servers. Payment processing and card security are handled solely by Yoco.
How we use information
- To operate the Service and connect your GoHighLevel account to your Yoco merchant account.
- To create and verify payments, and to record and reconcile transactions.
- To secure the Service, prevent fraud, and verify webhook authenticity.
- To provide support and respond to enquiries.
- To comply with legal and regulatory obligations.
How we share information
We do not sell your personal information. We share information only with the service providers necessary to operate the Service:
- Yoco — to process payments and settle funds to your merchant account. See Yoco's Privacy Policy.
- GoHighLevel — the CRM platform where checkouts and orders are managed. See GoHighLevel's Privacy Policy.
- Our hosting provider — for secure hosting of the Service.
We may also disclose information where required by law or to protect our rights and the safety of users.
Data security
We protect information with appropriate technical and organisational measures, including encryption of API keys at rest, signature-verified webhooks with replay protection, and restricted access to systems. No method of transmission or storage is completely secure, but we work to safeguard your data.
Data retention
We retain information for as long as needed to provide the Service and to meet legal, accounting, and reporting obligations. You may request deletion of your data as described below, subject to those obligations.
Your rights
Under South Africa's Protection of Personal Information Act (POPIA) and applicable law, you may request to access, correct, or delete your personal information, or object to certain processing. To exercise these rights, contact us via our Contact page.
Cookies
The Service uses only essential cookies and session storage required for it to function and remain secure. It does not use advertising or third-party tracking cookies.
International processing
Some of our service providers may process data outside South Africa. Where this occurs, we take steps to ensure your information remains protected to a comparable standard.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date above.
Questions about this policy? Reach us via our Contact page.