1. Introduction and Responsible Party
This Privacy Policy explains how Eghardt du Toit ("I", "me", "the Responsible Party") collects, uses, stores, and protects personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).
I take your privacy seriously. This policy applies to all personal information collected through this website, via email, or in the course of providing web development services.
2. What Personal Information I Collect
I only collect personal information that is necessary, relevant, and adequate for the purposes described below. This may include:
- Contact information: your name, email address, and phone number (when provided).
- Project information: details about your business, project requirements, and budget that you voluntarily share when making an enquiry.
- Communication records: emails, messages, and other correspondence between us.
- Technical data: basic server logs (IP address, browser type, pages visited) collected automatically when you visit this website. This data is used for security and performance purposes and is not used to identify you personally.
I do not collect sensitive personal information as defined in Section 26 of POPIA (such as race, health, biometric, or financial account data) through this website.
3. How I Collect Personal Information
Personal information is collected in the following ways:
- When you complete and submit the contact form on this website.
- When you send me an email or message directly.
- Automatically through server logs when you browse this website.
4. Purpose of Processing
In terms of Section 13 of POPIA, I process your personal information only for the following lawful purposes:
- To respond to your enquiry and provide you with a quote or project proposal.
- To perform the web development services you have engaged me for.
- To communicate with you about your project.
- To fulfil legal obligations (e.g. invoicing and record-keeping).
- To improve the performance and security of this website.
I do not use your personal information for unsolicited marketing without your consent.
5. Legal Basis for Processing
Processing of your personal information is based on one or more of the following grounds under POPIA:
- Consent: you have voluntarily provided your information by completing the contact form or emailing me.
- Contractual necessity: processing is necessary to perform services you have requested.
- Legal obligation: processing is required to comply with South African law (e.g. tax and financial records).
- Legitimate interest: processing is necessary for the legitimate interests of running this business, provided those interests are not overridden by your rights.
6. Sharing of Personal Information
I do not sell, rent, or trade your personal information to third parties. Your information may be shared in the following limited circumstances:
- Service providers: third-party tools I use to operate this website and business (e.g. email hosting, web hosting providers). These parties are required to handle your information securely and in accordance with POPIA.
- Legal requirement: where I am required by law, court order, or lawful authority to disclose your information.
Where personal information is shared with third parties outside South Africa, I take reasonable steps to ensure an adequate level of protection applies, as required by Section 72 of POPIA.
7. Cookies
This website uses a session cookie for technical functionality (to maintain your session while using the contact form). This cookie does not track you across other websites and does not store any personal information beyond a randomly generated session identifier.
No third-party tracking, advertising, or analytics cookies are used on this website.
8. Retention of Personal Information
I retain personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Specifically:
- Enquiry records from non-clients are deleted within 12 months if no project proceeds.
- Client project records are retained for 5 years after project completion for legal and accounting purposes, in line with South African tax and commercial law requirements.
9. Your Rights Under POPIA
In terms of POPIA, you have the following rights regarding your personal information:
- Right of access: you may request details of the personal information I hold about you.
- Right to correction: you may request that inaccurate or incomplete information be corrected.
- Right to deletion: you may request that your personal information be deleted, subject to legal retention requirements.
- Right to object: you may object to the processing of your personal information in certain circumstances.
- Right to lodge a complaint: you have the right to lodge a complaint with the Information Regulator of South Africa if you believe your personal information has been processed in violation of POPIA.
To exercise any of these rights, contact me at eghardtdutoit@gmail.com. I will respond within a reasonable timeframe and no later than 30 days.
10. Information Regulator
If you are not satisfied with my response to a privacy concern, you may contact the Information Regulator of South Africa:
11. Security
I take reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. However, no method of transmission over the internet is 100% secure, and I cannot guarantee absolute security.
12. Changes to This Policy
This Privacy Policy may be updated from time to time. The date at the top of this page reflects the date of the most recent revision. Continued use of this website following any update constitutes your acknowledgment of the updated policy.
13. Contact
For any privacy-related queries or to exercise your rights, please contact me at eghardtdutoit@gmail.com.