Legal
Privacy Policy
What we collect through this website, why we collect it, how long we keep it, and what you can ask us to do about it.
Last updated
Draft — pending legal review. This document is a working draft prepared for legal review. It has not yet been reviewed by a qualified practitioner, and items marked "to confirm" still need decisions. Do not treat it as final.
This policy explains what personal information Lulonke Solutions collects through this website, why we collect it, how long we keep it and what you can do about it. It is written to meet our obligations under the Protection of Personal Information Act 4 of 2013 (POPIA).
Who is responsible for your information
Lulonke Solutions is the responsible party for the personal information described in this policy.
- Address: 18 Crownwood Road, Ormonde, Johannesburg 2091, South Africa
- Email: info@lulonkesolutions.co.za
- Telephone: 010 006 7230
- Information Officer: to confirm — POPIA requires a named Information Officer registered with the Information Regulator
What we collect, and when
When you book a growth assessment
The assessment form is the main place we collect personal information. We ask for it because we cannot give a useful answer without it.
| What we collect | Why | Required |
|---|---|---|
| Name | So we know who we are replying to | Yes |
| Company | To research your business before responding | Yes |
| Email address | To send you our response | Yes |
| Website address | To review your current digital presence | No |
| Industry and business size | To judge whether we are a sensible fit | Yes |
| Goal and current marketing channels | To make the response specific rather than generic | Yes |
| Optional message | Anything else you want us to know | No |
Alongside your answers we record the date and time of submission, the page you submitted from, and your browser user-agent string. We keep these to investigate abuse and to confirm when consent was given.
When you use the Growth Score tool
The Growth Score scanner takes a website address and fetches that page the way any visitor or search engine would. It reads only what is publicly served. It does not attempt to access anything behind a login, and it does not submit forms or alter anything on the site it scans.
- The website address you enter is processed to run the scan
- Your IP address is held briefly in memory to limit how many scans can be run in a short period
- We do not require an email address to run a scan, and we do not create an account for you
When you browse the site
We use Google Analytics 4 (measurement ID G-7N63V1XLJ0) to understand which pages are read and how people move through the site. This sets cookies in your browser and sends usage data to Google. It tells us about patterns across visitors; we do not use it to identify you personally.
We do not run advertising pixels, cross-site trackers, session recording or heatmap tools on this site.
Our lawful basis for using it
- Consent — for the assessment form. You tick a box before submitting, and we record that you did
- Legitimate interest — for analytics, security and rate limiting, which keep the site working and usable
- Contractual necessity — where you become a client and we need your details to deliver the work
Who we share it with
We do not sell your personal information, and we do not share it with third parties for their own marketing. We do rely on service providers to operate the site:
- Google — analytics on site usage
- Our email delivery provider — to deliver the notification containing your enquiry
- Our hosting provider — which processes requests to serve the site
- Our CRM, where an enquiry is recorded so we can follow it up
Some of these providers process information outside South Africa. Where that happens, POPIA requires the receiving country or provider to offer comparable protection, and we rely on the provider's contractual commitments to that effect.
How long we keep it
- Enquiries that do not become clients: 24 months, then deleted — to confirm
- Client records: for the duration of the engagement and afterwards for as long as tax and company law requires
- Analytics data: according to the retention period configured in Google Analytics
- Rate-limiting records: cleared within minutes; never written to a database
Your rights
Under POPIA you may:
- Ask what personal information we hold about you
- Ask us to correct anything that is wrong or incomplete
- Ask us to delete information we no longer have a reason to keep
- Object to us processing your information
- Withdraw consent at any time, which stops future processing but does not undo what was lawful before
- Complain to the Information Regulator if you think we have handled your information badly
To exercise any of these, email info@lulonkesolutions.co.za. We will respond within a reasonable period, and we may need to confirm your identity first so that we do not disclose your information to someone else.
How we protect it
- The site is served over HTTPS, so information submitted is encrypted in transit
- Form submissions are handled server-side; credentials for our providers are never exposed to your browser
- Access to enquiry data is limited to the people who need it to respond
- Submissions are rate limited and screened to reduce automated abuse
Children
This site is aimed at businesses and is not directed at children. We do not knowingly collect information from anyone under 18. If you believe we have, tell us and we will delete it.
Changes to this policy
If we change how we handle personal information, we will update this page and the date shown at the top. Where a change is significant, we will say so rather than relying on you to notice.
Questions about this page?
Email info@lulonkesolutions.co.za or call 010 006 7230.