Legal

Privacy Policy

Effective 27 September 2026. Written for the Protection of Personal Information Act 4 of 2013 (POPIA) and, for clients in the United Kingdom, the UK GDPR.

1. Who is responsible for your information

This website and the services on it are run by Minenhle Junior Nhlumayo, a sole proprietor trading as J's Web Development & Cyber Guard Tech, based in Johannesburg, Gauteng, South Africa. Under POPIA, Minenhle Junior Nhlumayo is the responsible party and the Information Officer.

Email: jswebdevandcyberguardtech@gmail.com
Phone and WhatsApp: +27 60 462 4900

2. The short version

This website sets no cookies, runs no analytics, no advertising pixels and no tracking of any kind. Its fonts and images are served from this website itself, not from Google or any other third party.
The enquiry form does not send anything to a server. It opens your own email app with your message filled in, and nothing is stored until you choose to send that email.
Only what is needed to reply to you and quote for your project is collected. Your information is never sold, rented or used for marketing lists.

3. What information is collected

When you get in touch

Only what you choose to send: your name, an email address or phone number to reply to, what you need, and your message. If you message on WhatsApp or Facebook, those apps also share your profile name and number with me. Please do not send passwords, ID numbers or bank details through any of these channels.

When you become a client

What is needed to do the work and keep proper records: your name, business name, contact details, billing details on invoices, the content you provide for your website (text, photos, logos), and, where you ask for it, login access to your hosting, domain or website accounts.

When you visit this website

This website itself collects nothing about you. Like every website, the hosting provider's servers automatically record basic technical information when a page is requested (your IP address, browser type, the page and the time) in short-lived server logs, used only to deliver the site and keep it secure. These logs are not used to identify or profile you.

4. Why it is used, and the lawful basis

Purpose	Lawful basis (POPIA section 11 / UK GDPR article 6)
Replying to your enquiry and preparing a quote	Your consent, given with the tick box on the form or by messaging, and steps you asked for before a contract
Designing, building, securing and supporting your website	Performing our contract with you
Invoices, accounting and tax records	Legal obligation (for example the Tax Administration Act)
Keeping this website and your systems secure	Legitimate interest in preventing fraud and attacks

Your information is only used for the purpose it was collected for. You can withdraw consent at any time by emailing or messaging, and that will not affect anything done before you withdrew it.

Personal information is never sold. It is only handled by the services needed to run the business, which act as operators:

Google (Gmail), where emails are received and stored.
Meta (WhatsApp and Facebook), only if you choose to message there. Their own privacy terms apply.
The website hosting provider, for the short server logs described above.
For client projects, the hosting, domain or payment providers you choose for your website, only as far as the work requires.

Information may also be disclosed if the law requires it, for example to a court or regulator.

6. Information sent outside South Africa

Google and Meta store data on servers outside South Africa. These providers are bound by data protection laws and contractual safeguards that give protection substantially similar to POPIA, as section 72 of POPIA requires. By using email or WhatsApp to contact the business, you also consent to this transfer.

7. How long it is kept

Enquiries that do not become a project: deleted within 12 months of the last message.
Client project records and invoices: kept for 5 years after the project ends, as South African tax law requires, then deleted.
Login details you share for a project: used only during the work and deleted when it ends. You should change those passwords after handover.

8. How it is protected

Reasonable technical and organisational measures are used, as POPIA section 19 requires: accounts protected by strong, unique passwords and two-factor authentication, encrypted connections (HTTPS), devices kept updated and locked, and access limited to the owner of the business. If a security breach ever affects your information, you and the Information Regulator will be told as soon as reasonably possible, as section 22 requires.

9. Your rights

You have the right to:

ask whether your information is held, and get a copy of it;
ask for it to be corrected or deleted;
object to it being used, or withdraw your consent;
not receive direct marketing (none is sent);
complain to the regulator (see below).

To use any of these rights, email jswebdevandcyberguardtech@gmail.com. You'll get a reply within 30 days, free of charge. You may be asked to confirm your identity first, so that nobody else can get your information.

10. How to complain

Please get in touch first so the problem can be put right. You may also complain to the regulator at any time:

South Africa: the Information Regulator, inforegulator.org.za (opens in a new tab), complaints: POPIAComplaints@inforegulator.org.za
United Kingdom: the Information Commissioner's Office, ico.org.uk (opens in a new tab)

11. Children

This website and its services are for businesses and adults. Information about anyone under 18 is not knowingly collected. If you think a child has sent information, get in touch and it will be deleted.

12. Changes to this policy

If this policy changes, the new version will be posted here with a new effective date. If the website ever starts using cookies or analytics, you will be asked for consent first and the Cookie Policy will be updated.