Legal

Privacy Policy

Last updated: 2 June 2026

Quick summary: We collect the bare minimum personal information needed to respond to your enquiries and deliver our services. We never sell your data, and we comply with South Africa's POPIA and the EU's GDPR.

1. Who we are

NOVASITE.CLOUD ("we", "us", "our") is a boutique web development studio based in Sandton, Gauteng, South Africa. For the purposes of POPIA, our Information Officer is [YOUR FULL NAME], contactable at novasite.cloud@gmail.com.

2. What information we collect

2.1 Information you give us

When you submit our contact form, request a quote, or message us via WhatsApp, we collect:

Your name
Your email address
Your phone number (if you choose to provide it)
Project details, budget range, and any message content you send us

2.2 Information collected automatically

When you visit our site, we (or our service providers) may collect:

Your IP address and approximate location (city/country level)
Browser type, device type, operating system, and screen size
Pages visited, time spent on each, and how you arrived at our site
Cookies and similar tracking technologies (see Section 6)

3. How we use your information

We process your personal information for the following lawful purposes:

To respond to enquiries — replying to your messages, sending quotes, and discussing project requirements.
To deliver our services — managing projects, invoicing, and ongoing support if you become a client.
To improve our website — understanding which pages perform well and fixing what doesn't.
To comply with the law — including tax, accounting, and regulatory obligations.

We will never use your information for purposes you haven't agreed to.

4. Legal basis for processing (GDPR)

If you're an EU/EEA visitor, our legal basis for processing your data is:

Consent — for cookies and marketing communications (you can withdraw consent at any time).
Contract — when we need your data to deliver services you've engaged us for.
Legitimate interest — for analytics, security, and basic communications with prospects.
Legal obligation — for tax records and statutory compliance.

5. Who we share your information with

We don't sell your personal information. We only share it with:

Netlify — our hosting provider, which processes site traffic data. Their privacy policy is at netlify.com/privacy.
FormSubmit — the service that handles contact form submissions and delivers them to our inbox. Their privacy policy is at formsubmit.co/privacy.
Google Analytics (if enabled and you've consented) — for understanding site usage patterns.
Legal authorities — if required by law, court order, or to protect our rights.

6. Cookies and tracking

Our site uses cookies and similar technologies for essential functionality and (with your consent) analytics. On your first visit, you'll see a cookie banner where you can accept or decline non-essential cookies. You can change your choice at any time by clearing your browser's site data for our domain.

We use:

Essential cookies — required for the site to work. These can't be disabled.
Analytics cookies — only loaded if you accept the cookie banner. These help us understand site usage anonymously.

7. How long we keep your data

Contact form submissions — kept in our inbox for up to 24 months, then deleted unless you've become a client.
Client records — kept for the duration of our engagement plus 7 years afterwards, as required by South African tax law.
Analytics data — anonymised data retained for up to 26 months.

8. Your rights under POPIA and GDPR

You have the right to:

Access — request a copy of the personal information we hold about you.
Correction — ask us to correct inaccurate or incomplete data.
Deletion — request that we delete your data (subject to legal retention requirements).
Object — object to specific processing activities, such as marketing.
Restrict processing — ask us to pause processing while a dispute is resolved.
Data portability — receive your data in a structured, commonly used format.
Withdraw consent — at any time, with no penalty.
Lodge a complaint — with the South African Information Regulator at inforegulator.org.za.

To exercise any of these rights, email us at novasite.cloud@gmail.com. We respond within 30 days.

9. How we protect your data

We use industry-standard security measures including HTTPS encryption site-wide, security headers (HSTS, CSP, X-Frame-Options), and reputable third-party services with their own compliance frameworks. That said, no system is 100% secure — we take reasonable steps, but can't guarantee absolute security.

10. International data transfers

Some of our service providers (Netlify, Google) process data outside South Africa. These providers are bound by their own POPIA/GDPR-compliant frameworks and standard contractual clauses where applicable.

11. Children's privacy

Our services aren't directed at children under 18. We don't knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we'll delete it.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will always show when. For material changes, we'll notify you via email if we have your address.

13. Contact us

Questions about this policy or your personal information? Reach out:

Plain-English version: We collect what you send us via our contact form, we use it to reply to you and serve you, we don't sell it, we delete it when we don't need it anymore, and you can email us anytime to see, correct, or delete what we have.