Privacy Policy

1. Responsible Party

Webbuilder operates as a technical services brand associated with Esterhuizen Consulting & Coaching (ECCSA).

Esterhuizen Consulting & Coaching (ECCSA) acts as the Responsible Party in terms of the Protection of Personal Information Act 4 of 2013 (POPIA).

2. Categories of Data Subjects

We may process personal information relating to:

• Clients

• Prospective clients

• Website users

• Administrators

• Service providers

• Contractors

3. Categories of Personal Information Processed

Personal information may include:

• Names and surnames

• Contact details (email, telephone number)

• Business information

• Billing information

• IP addresses

• Technical logs

• Website usage data

• Communications

• Website content and backups

• Administrator access credentials (where required for service delivery)

We do not intentionally collect special personal information unless required for service delivery and lawfully authorised.

4. Purpose of Processing

Personal information is processed for purposes including:

• Website development and configuration

• Hosting and maintenance

• Technical support

• Security monitoring

• SEO and optimisation services

• Advertising management

• Billing and invoicing

• Client communication

• Compliance and record keeping

We process information only for lawful, specific, and necessary purposes.

5. Lawful Basis for Processing

Personal information is processed based on:

• Consent (where applicable)

• Performance of a contract

• Compliance with legal obligations

• Legitimate business interests

• Protection of legitimate interests of the data subject

6. Cookies, Logs & Monitoring

Our website and hosted environments may use:

• Cookies

• Server logs

• Analytics tools

• Security monitoring systems

These are used for:

• Functionality

• Performance monitoring

• Security

• Diagnostics

Where analytics are used, data may be aggregated or anonymised.

Users may adjust browser settings to manage cookies.

7. Direct Marketing

We do not send direct marketing communications without consent where required under POPIA and the Electronic Communications and Transactions Act (ECTA).

Users may opt out of marketing communications at any time.

8. Third-Party Operators

We may appoint third-party operators to process information on our behalf, including:

• Hosting providers

• Cloud infrastructure providers

• Analytics services

• Security platforms

• Payment gateways

• Advertising platforms

• AI service providers

All operators are required to implement appropriate security safeguards and process information only in accordance with contractual obligations.

9. Cross-Border Transfers

Where third-party operators are located outside South Africa, personal information may be transferred cross-border.

Such transfers occur only where:

• The recipient is subject to data protection laws similar to POPIA, or

• Contractual safeguards are in place, or

• Consent has been obtained where required.

10. Security Safeguards

We implement reasonable technical and organisational measures to safeguard personal information against:

• Loss

• Unauthorised access

• Destruction

• Disclosure

• Misuse

No system can guarantee absolute security.

11. Data Retention

Personal information is retained only for as long as necessary to:

• Fulfil contractual obligations

• Comply with legal requirements

• Resolve disputes

• Maintain business records

Backups may contain archived data for technical continuity purposes.

12. Data Subject Rights

In terms of POPIA, data subjects have the right to:

• Access their personal information

• Request correction

• Object to processing

• Request deletion (where lawful)

• Withdraw consent (where processing is based on consent)

• Lodge a complaint

Requests may be submitted to:

📧 [Insert your email address]

We may require verification of identity before processing requests.

13. Children’s Information

We do not knowingly collect personal information from children under the age of 18 without appropriate consent.

14. Complaints

If you believe your personal information has been processed unlawfully, you may contact:

The Information Regulator (South Africa)
Website: https://www.justice.gov.za/inforeg/
Email:

15. Relationship to ECCSA Privacy Policy

This Webbuilder Privacy Policy must be read together with the ECCSA Privacy Policy.

In the event of inconsistency, the ECCSA Privacy Policy shall prevail.

ECCSA Privacy Policy:
https://esterhuizenconsulting.co.za/privacy-policy/

16. Governing Law

This Privacy Policy is governed by the laws of the Republic of South Africa.