Privacy Policy
Last updated: 21 July 2026
This policy explains what personal information Lumework collects when you use this website, why we collect it, who we share it with, and what rights you have over it. It is written to comply with the Protection of Personal Information Act, 2013 (POPIA).
We have tried to write this in plain language rather than legalese. If anything here is unclear, contact us and we will explain it.
1. Who we are
Lumework is a web design studio operating in South Africa.
- Registered name: [REGISTERED BUSINESS NAME — or "PW de Bruyn, trading as Lumework"]
- Registration number: [CIPC NUMBER — or delete this line if operating as a sole proprietor]
- Address: [PHYSICAL OR POSTAL ADDRESS]
- Information Officer: [NAME — for a sole proprietor this is the owner]
- Email: debruynpw@gmail.com
- WhatsApp: +27 79 022 7258
For the purposes of POPIA, Lumework is the responsible party for the personal information described in this policy.
2. What information we collect
We only collect what we actually need. There is no account system on this site and we do not ask you to register.
| What | When | Why |
|---|---|---|
| Name, email address, phone number | When you submit the quote form or contact us | To reply to your enquiry and prepare a quote |
| Business name, industry, and the answers you give in the quote flow | When you complete the quote flow | To understand your scope so the quote is accurate |
| Your WhatsApp number and message content | If you choose to message us on WhatsApp | To have the conversation you started |
| Anonymous usage data — pages viewed, approximate location (city level), device type, referring site | Automatically, while you browse | To understand which pages are useful and to measure advertising |
We do not collect special personal information as defined in POPIA (such as health, religious, biometric or criminal record data), and we do not knowingly collect information from children.
3. Legal basis for processing
Under POPIA we process your information on these grounds:
- Consent — you chose to fill in the quote form or message us.
- Legitimate interest — understanding how the site is used so we can improve it, and keeping records of enquiries and quotes.
- Contractual necessity — if you become a client, we need your details to deliver the work and invoice you.
4. Cookies and analytics
This site uses cookies and similar technologies for two purposes:
- Essential — remembering your progress through the quote flow so you do not lose your answers. These cannot be switched off without breaking the site.
- Analytics and advertising — Google Analytics and Google Ads tags, which tell us how many people visited a page and whether an advert led to an enquiry. This data is aggregated and does not identify you by name.
You can block or delete cookies in your browser settings at any time. Doing so may break the quote flow but the rest of the site will work normally. You can also opt out of Google Analytics using Google's opt-out browser add-on.
5. Who we share your information with
We do not sell your personal information. We have never done so and we do not intend to.
We share it only with service providers who help us run the business, and only to the extent they need it:
- Vercel — website hosting and delivery.
- Google — Analytics and Ads measurement.
- Meta (WhatsApp) — if you choose to contact us via WhatsApp, that conversation is subject to WhatsApp's own privacy terms.
- FormSubmit — delivers quote form submissions to our inbox.
- Email provider — to receive and reply to your enquiry.
Some of these providers process data outside South Africa. Where that happens, we rely on the provider's own contractual safeguards, as permitted under section 72 of POPIA.
We may also disclose information if the law requires it, such as a court order or a valid request from a regulator.
6. How long we keep it
- Enquiries that do not become projects: up to 24 months, then deleted.
- Client records: for the duration of the project and then as long as tax and company law requires, which is generally five years.
- Analytics data: retained according to Google's default retention settings.
7. How we protect it
We take reasonable technical and organisational steps to keep your information secure: the site is served over HTTPS, access to enquiry data is limited to people who need it, and accounts are protected with strong authentication.
No system is perfectly secure, and we will not pretend otherwise. If a breach occurs that creates a real risk to you, we will notify you and the Information Regulator as POPIA requires.
8. Your rights
Under POPIA you have the right to:
- Ask what personal information we hold about you.
- Ask us to correct information that is wrong or incomplete.
- Ask us to delete information we no longer have a lawful reason to keep.
- Object to processing based on legitimate interest.
- Withdraw consent at any time, without affecting processing that already happened.
- Complain to the Information Regulator if you believe we have mishandled your information.
To exercise any of these, email debruynpw@gmail.com. We will respond within 30 days. There is no charge for a reasonable request.
9. The Information Regulator
If you are not satisfied with how we have handled your information, you may complain to:
- The Information Regulator (South Africa)
- Website: inforegulator.org.za
- Email: complaints.IR@justice.gov.za
10. Changes to this policy
If we change how we handle personal information, we will update this page and change the date at the top. If the change is significant, we will say so clearly rather than quietly editing the text.
11. Contact
Questions about this policy, or about your information:
- Email: debruynpw@gmail.com
- WhatsApp: +27 79 022 7258