The small print

Privacy Policy

Last updated: 24 October 2026

This policy explains how TR_Webbuilds handles personal information under the Protection of Personal Information Act, 2013 (POPIA). It's written in plain language. If anything is unclear, ask me.

1. Who is responsible for your information

2. Who this policy applies to

People who visit this website, people who send an enquiry, clients, and suppliers or business contacts.

3. What I collect

• When you send an enquiry: your name, your business name (optional), what you need, your budget range, and anything else you choose to write.
• When you message or call me: your phone number or email address, and the messages you send.
• When you leave a review: your name, your business name (optional) and the review you write, together with your star rating. You tick a box to say it may be published, and I only publish it after I have read it.
• When you pay by card: you pay on a secure page hosted by Payfast, not on this website. Payfast handles your card details and I never see or store them. All I receive back is confirmation that the payment went through, and the amount.
• When you become a client: the details needed to quote, build and invoice your website, such as billing details and the content you give me for your site.
• When you visit the website: this site sets no cookies of its own and uses no advertising or profiling tools. Our host, Netlify, measures anonymous speed and performance statistics for the site (how fast pages load, and which page was visited). It also keeps standard technical logs, such as IP address and browser type, to keep the site running and secure. None of this identifies you personally and none of it is used to follow you around the web.

I do not knowingly collect special personal information (such as health or religious information) or information about children.

4. Where it comes from

Directly from you, when you fill in the form, message me, email me or talk to me. If someone contacts me on your behalf, such as a staff member for your business, the information comes from them.

5. Why I use it, and the legal basis

• To reply to your enquiry and prepare a quote. Basis: your consent, and steps you asked for before a contract.
• To publish your review on this website. Basis: your consent, given by ticking the box on the review form. You can ask me to take it down at any time and I will remove it.
• To design, build and hand over your website, and to invoice you. Basis: our contract.
• To keep financial and tax records. Basis: legal obligation.
• To keep this website secure and working. Basis: legitimate interest.

I will not send you marketing messages unless you have given me your clear written consent first. Unsubscribing, or never having opted out, does not count as consent.

6. What you have to give me

To reply to an enquiry I need your name and a short description of what you need. Without them I can't respond properly. Everything else is optional.

7. Who I share it with

Only the services needed to run the business, and only for the purposes above:

• WhatsApp (Meta): when you message me or use the enquiry form, which opens WhatsApp.
• Google: Gmail for email, and Google Fonts, which loads the typefaces on this site. When the page loads, your browser connects to Google's servers, which can see your IP address.
• Netlify, the host that serves this website, receives and stores review submissions, and measures the site's anonymous speed statistics.
• Payfast, the South African payment provider that processes card payments. Your card details are given directly to them and are never passed through this website or held by me.
• An accountant or tax advisor, if needed for my records.
• Regulators or law enforcement, only where the law requires it.

A review you submit, and consent to, is published publicly on the Reviews page with your name and, if you gave one, your business name. Nothing else you send me is made public.

I never sell or rent your personal information.

8. Information sent outside South Africa

Payfast is a South African company and processes card payments in South Africa. WhatsApp, Gmail, Google Fonts and Netlify may store or process information on servers outside South Africa. These providers are bound by their own data protection laws and agreements, which give a level of protection similar to POPIA. By using these channels to contact me, you agree to this transfer.

9. How long I keep it

• Enquiries that don't become a project: deleted within 12 months.
• Client records, quotes and invoices: kept for 5 years for tax purposes, then deleted.
• Payment records: proof of payment and amounts, kept for 5 years for tax purposes. Card numbers are never held, because I never receive them.
• Reviews: kept on the website until you ask me to remove them.
• Hosting logs: kept for the hosting provider's standard period.

10. How I keep it safe

Accounts that hold your information are protected with strong passwords and two-step verification where available. Only I have access. If a security breach affected your information, I would tell you and the Information Regulator as POPIA requires.

11. Your rights

You can ask me to:

• tell you what personal information I hold about you and give you a copy,
• correct information that is wrong or out of date,
• delete your information, where I'm not required by law to keep it,
• stop using your information, or object to how it's used.

Email website14tr@gmail.com. Requests are free and I will respond within 30 days.

12. Complaints

If you're unhappy with how I've handled your information, please talk to me first so I can put it right. You also have the right to complain to the Information Regulator:

Changes to this policy

I review this policy whenever the way I handle information changes. The date at the top shows the latest version.