Privacy Policy

WebGlow Web Design & Marketing Agency ("WebGlow," "we," "us," or "our") is committed to protecting your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, and disclose personal information in compliance with the Protection of Personal Information Act, 2013 (POPIA) and other applicable South African laws.

By using our website webglow.co.za and our services, you consent to the practices described in this Privacy Policy.

We collect the following types of personal information, depending on how you interact with us:

• Contact Information: Your name, email address, phone number, and business name when you submit a contact form, request a quote, or engage our services.
• Delivery Information: Your name, phone number, email, and delivery address when you purchase NFC Google Review Cards through our online shop.
• Payment Information: Payment details are collected and processed securely by our payment processor, PayFast. We do not receive or store your credit card or banking information.
• Website Analytics Data: We use Google Analytics 4 (GA4) and Google Tag Manager (GTM) to collect anonymised data about your visit, including pages viewed, time on site, device type, approximate location (city/region), and referring website. This data is aggregated and does not identify you personally.
• Communication Records: Records of your enquiries, emails, and correspondence with us, retained for service quality and record-keeping.
• Technical Data: IP address, browser type, and cookie data, collected automatically when you visit our Website.

We process your personal information for the following purposes:

• To respond to your enquiries and provide quotes for our services.
• To deliver web design, digital marketing, Google Ads, GBP management, and SEO services to you.
• To process and fulfil your NFC Google Review Card orders, including programming, packaging, and shipping.
• To communicate with you about your project, order status, or service updates.
• To send you marketing communications (only with your consent, which you can withdraw at any time).
• To analyse website usage and improve our Website and services.
• To comply with legal obligations and protect against fraud.

Under POPIA, we process your personal information based on the following lawful grounds:

• Consent: You have provided consent for us to process your personal information (e.g., when submitting a contact form or placing an order).
• Contract: Processing is necessary to fulfil a contract or service engagement with you.
• Legal Obligation: Processing is required to comply with a legal obligation under South African law.
• Legitimate Interest: Processing is necessary for our legitimate business interests, such as improving our services and preventing fraud, provided your rights and freedoms are not overridden.

We do not sell your personal information. We may share it with the following third-party service providers, who process it on our behalf under their own privacy and security policies:

• PayFast: Our payment processor, who handles all payment transactions securely. PayFast collects and processes your payment information in accordance with their privacy policy. We receive only confirmation of payment and your order details.
• The Courier Guy: Our shipping partner, who receives your name, phone number, and delivery address to deliver your NFC Review Card orders.
• Google (Analytics & Ads): We use Google Analytics 4 and Google Tag Manager to collect anonymised usage data. Google may process this data in accordance with its privacy policy.
• Service Providers: We may use third-party tools for email, hosting, and other business functions. These providers have access to limited personal information necessary to perform their services.

We may also disclose personal information if required by law, court order, or other legal process, or to protect the rights, property, or safety of WebGlow, our clients, or others.

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including:

• Active client records are retained for the duration of the engagement and for a reasonable period thereafter for reference and support.
• Order and transaction records are retained for a minimum of five (5) years as required by South African tax law.
• Contact form submissions are retained for up to two (2) years unless you become a client.
• Analytics data is retained in accordance with Google Analytics' default retention settings.

After the retention period, personal information is securely deleted or anonymised.

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse, including:

• Secure payment processing through PayFast, which is PCI-DSS compliant.
• Encrypted data transmission (HTTPS/SSL) on our Website.
• Access controls limiting personal information to authorised personnel only.
• Regular security reviews of our systems and third-party providers.

However, no method of transmission or electronic storage is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your information.

Our Website uses cookies and similar technologies to function properly and to analyse traffic. Cookies are small text files stored on your device. We use:

• Essential Cookies: Necessary for the Website to function (e.g., shopping cart functionality).
• Analytics Cookies: Google Analytics 4 collects anonymised data about how visitors use our Website, helping us improve the user experience.
• Advertising Cookies: We may use Google Ads cookies to measure the effectiveness of our advertising.

You can control or disable cookies through your browser settings. Disabling certain cookies may affect Website functionality.

Under POPIA, you have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete personal information.
• Deletion: You may request that we delete your personal information, subject to legal retention requirements.
• Objection: You may object to the processing of your personal information for marketing purposes.
• Withdrawal of Consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise any of these rights, please contact us using the details in Section 11. We will respond to your request within a reasonable timeframe, as required by POPIA.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy or wish to exercise your rights under POPIA, please contact our Information Officer:

• Business: WebGlow Web Design & Marketing Agency
• Location: Potchefstroom, South Africa
• Phone: 072 122 3036
• Email: contactwebglo@gmail.com
• Website: webglow.co.za