Privacy notice

Last updated: [date]. This notice explains what [business name] does with the personal information you give us through this website, as the Protection of Personal Information Act (POPIA) asks. It is a template: every line in square brackets is a fact the business fills in, lines about something this site does not do should be removed, and the business should have it checked before relying on it.

Who is responsible

The responsible party is [business name], registration number [registration number], of [physical address]. Our information officer is [name], reachable at [email address] or [phone number].

What we collect

• When you send a message or ask for a quote: your name, email address, phone number, what you are asking about and your message.
• When you book or pay: your name, email address and phone number, the names and contact details of the people you book for if the booking asks for them, and the booking itself. Card details go straight to Paystack in its own payment window; we never see or store them.
• When you ask for booking updates by WhatsApp or SMS: your number, the time you ticked the box and its exact wording, and a log of the messages sent.
• When you ask to cancel or move a booking: the reason you give, and our answer.
• When you make an account: your email address, and the name and phone number you choose to add. We never ask for or store a password.
• When you sign up for the newsletter: your email address, your name if you give it, and the time and the exact wording you agreed to.
• To stop spam, your internet address is kept for one hour, and only as a one-way hash that cannot be turned back into the address.

Why we collect it

To reply to your enquiry or prepare a quote; to take and confirm your booking and send you reminders and the link to ask to cancel; to deal with a cancellation request and any refund; to keep the records the tax law asks for; to show you your bookings when you sign in; to send the updates you asked for, and nothing else. We do not sell your information or use it for anything else.

Is it voluntary

Yes. Without an email address or a phone number we cannot reply to you or confirm a booking, so those fields are required on the forms. No law requires us to collect this information [unless a law applies to the business: name it here].

Who receives it

• Cloudflare (hosting and the spam check), in [country or countries].
• [Resend or Brevo], the email provider that delivers our replies and confirmations, in [country].
• Paystack for payments, in South Africa and [country].
• Google, only if you tap the map on the contact page, if you sign in with Google, or if you book a lesson that comes to you and type an address.
• Meta (WhatsApp) and [BulkSMS or Twilio], only for the updates you switched on.

Some of these process information outside South Africa. We use them because they protect personal information to a standard comparable to POPIA [confirm per provider].

How long we keep it

Messages and quote requests: 12 months after our last reply. Bookings, cancellation requests and payments: [five years, for tax records]. Accounts: until you delete yours. Newsletter addresses: until you unsubscribe. After that we delete it.

Your rights

You may ask to see the personal information we hold about you, ask us to correct or delete it, object to us processing it, and withdraw your newsletter consent at any time (every newsletter has an unsubscribe link). Write to [email address]. If you are unhappy with how we handled your information, you may complain to the Information Regulator: see inforegulator.org.za.

How we count visits

This website keeps its own simple visit statistics, so we can see which pages help people and which do not. It does not use Google Analytics, advertising trackers or cookies for this. We store the page viewed, buttons clicked, how long a page was read, the country (from the network, not your address) and whether the device is a phone or a computer, under a random number kept in your browser that is replaced every 30 days. We do not store your internet address, your name or anything you type into a form. If your browser sends Do Not Track or Global Privacy Control, nothing is recorded. The records are deleted after 400 days.

Cookies and adverts

This site sets no advertising cookies. If we start advertising, a banner will ask first, and "Cookie choices" in the footer changes your answer.