Privacy Policy

Last updated: July 2026

Cubed B2B is owned and operated by ADD Designs PTY Ltd ("ADD Designs", "we", "us", or "our"). This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website, create an account, use the Cubed B2B wholesale ordering portal, contact support, or connect third-party services such as Xero and payment providers.

Cubed B2B is a business-to-business service. If you are a buyer using a supplier's portal, that supplier may also be responsible for how your information is used in their own business. In that case, ADD Designs processes the information needed to provide the platform to that supplier.

1. Information We Collect

We collect information you provide directly, including names, business names, email addresses, phone numbers, login details, support messages, billing details, and setup information for your organisation.

We also process portal data created through the service, including products, customer records, addresses, order history, invoices, payment status, delivery notes, notification preferences, staff activity, audit logs, and integration settings.

When you connect third-party services, we process the data needed to make those integrations work. This may include Xero contact, item, invoice, payment, account, tracking, and organisation data. If online payments are enabled, card details are handled by the payment provider and are not stored by Cubed B2B in plain card form.

2. How We Use Information

We use personal information to provide, secure, support, and improve Cubed B2B. This includes creating and managing accounts, processing wholesale orders, syncing with Xero, preparing invoices and payment workflows, sending operational notifications, responding to support requests, preventing abuse, monitoring platform health, and meeting legal, tax, accounting, and security obligations.

3. Legal Basis and POPIA

Where the Protection of Personal Information Act, 2013 ("POPIA") applies, we process personal information on lawful grounds such as performing a contract, complying with legal obligations, protecting legitimate business and security interests, or acting with consent where consent is required.

South Africa's Information Regulator describes POPIA as establishing minimum requirements for protecting personal information processed by public and private bodies. You can learn more from the Information Regulator.

4. Sharing and Service Providers

We do not sell personal information. We share information only where needed to operate Cubed B2B, including with cloud hosting, authentication, email, SMS, logging, support, courier, payment, and accounting integration providers. When you connect Xero, your use of Xero is also governed by Xero's own legal and privacy terms.

We may disclose information if required by law, to enforce our terms, to protect the rights and safety of users or the platform, or as part of a legitimate business transfer such as a merger, acquisition, or sale of assets.

5. Security

We use technical and organisational safeguards designed to protect personal information, including controlled access, authentication, encrypted transport, secure cloud infrastructure, audit logging, and separation of tenant data. No internet service can be guaranteed completely secure, so users must keep credentials private and tell us promptly if they suspect unauthorised access.

6. Retention

We keep personal information for as long as needed to provide the service, meet accounting and legal obligations, resolve disputes, maintain security records, and support backups. Where a tenant account is closed, we may retain limited records where required by law or legitimate operational needs.

7. International Processing

Cubed B2B and its service providers may process information in South Africa and other countries where our infrastructure or providers operate. Where personal information is transferred internationally, we take steps designed to protect it in line with applicable law and our service contracts.

8. Your Privacy Rights

Depending on the laws that apply, you may ask to access, correct, update, delete, or restrict use of your personal information. You may also object to certain processing or withdraw consent where processing depends on consent. We may need to verify your identity before acting on a request.

If you are a buyer using a supplier's portal, we may refer your request to that supplier where they are responsible for the relevant customer or order record. You may also have the right to complain to the Information Regulator or another applicable supervisory authority.

9. Children

Cubed B2B is intended for business users and is not directed at children. We do not knowingly collect information from children through public signup or marketing pages.

10. Changes to This Policy

We may update this Privacy Policy as Cubed B2B, our integrations, or legal requirements change. The latest version will be posted on this page with an updated date.

11. Contact

For privacy questions or requests, please visit our support page.