Privacy policy

Effective 21 April 2026 · Last updated 21 April 2026

SA Website builds and hosts small websites for South African businesses. To do that, we handle personal information about business owners and the operators of small businesses we identify from public sources. This policy explains what we collect, why we collect it, who we share it with, and how you can ask us to stop or remove your information.

We comply with the Protection of Personal Information Act, 2013 (POPIA). Where this policy uses terms like personal information, processing, responsible party, or data subject, they have the meanings given to them in POPIA.

Who we are

SA Website is operated by Afrimont Enterprises (Pty) Ltd (registration number 2026/693523/07), registered office 17 Midas Avenue, Olympus, Pretoria, Gauteng, 0081. Afrimont Enterprises (Pty) Ltd is the responsible party for the personal information described in this policy.

Operator contact: [email protected]
Privacy enquiries: [email protected]

What we collect

We process the following categories of personal information:

From public business listings

• Trading name of the business
• Business phone number (typically the owner's mobile)
• Physical street address
• Business category (e.g. plumber, laundry, panel-beater)
• Photos and reviews that appear on the public listing
• The Google Maps listing URL

From WhatsApp conversations with us

• Your WhatsApp display name and profile photo
• Messages you send us, including any media or voice notes
• The date, time, and delivery status of each message

If you sign up for a paid plan

• Your billing name and contact details
• For Pro: the domain name you wish to register and the WHOIS contact details required by the registry
• Payment confirmations, plan, billing history, and renewal status (full card data is held by Paystack — we never see or store your card number)

How we collect it

• Public sources. We collect the business listing fields above from publicly available Google Maps and Google Places results — the same data anyone can see by searching.
• Directly from you. When you message us on WhatsApp, complete a website request form, or reply to one of our messages.
• From our payment processor. When you pay through Paystack, we receive the result of the transaction and a customer reference.

Why we use it

We process this information for the following specific purposes:

• Generating a sample website for your business so we can show you what we'd build.
• Reaching out via WhatsApp or SMS to offer the site to the business owner.
• Operating the bot that handles enquiries, plan selection, and support.
• Hosting your site at a {slug}.getsite.co.za address or a custom domain.
• Billing & subscription management through Paystack.
• Improving our service — e.g. learning which categories of business respond, which copy converts better. We use aggregated, non-identifying data wherever possible.
• Complying with the law and responding to valid requests from regulators or law enforcement.

Our lawful basis under POPIA is legitimate interest for the initial outreach (we are offering a relevant commercial service to the business owner), and consent and performance of a contract once you become a paying customer.

Who we share it with

We share the minimum information necessary with the following operators (POPIA term for processors):

• WhatsApp / Meta — for delivering messages between us and the business owner.
• Paystack (Pty) Ltd — for processing subscription payments.
• Third-party AI providers — for generating the website copy. We send only the public business details (name, category, address); we do not send your WhatsApp messages, payment data, or contact information to these providers.
• Domain registrars — for Pro customers, to register and renew your custom domain.
• Hosting infrastructure providers — for serving the websites and storing our records.

We do not sell personal information. We do not share it for unrelated marketing purposes.

How long we keep it

• Scraped business listings are kept for up to 90 days from the date we add them, unless the business becomes a customer.
• WhatsApp conversation logs are kept for 12 months for support and dispute resolution, then deleted or anonymised.
• Customer records and payment history are kept for 5 years after the end of your subscription, to comply with South African tax and consumer-protection requirements.
• If you ask us to delete your information, we honour the request immediately, except where we are required by law to keep specific records.

Your rights under POPIA

As a data subject, you may at any time:

• Access the personal information we hold about you.
• Correct information that is wrong or out of date.
• Object to us processing your information for direct marketing — including by replying STOP on WhatsApp.
• Withdraw consent you've previously given.
• Request deletion of your information. See our data deletion instructions.
• Lodge a complaint with the Information Regulator (see below).

To exercise any of these, email [email protected] from the address linked to your account, or reply on WhatsApp from the number we have on file. We respond within 30 days.

Security

We host on infrastructure that uses TLS for data in transit and encryption at rest for stored data. Access to admin systems is restricted, password-protected, and logged. We don't store full payment card numbers — those are held by Paystack, which is PCI-DSS compliant.

No system is perfect. If we ever suffer a security incident that involves your personal information, we will notify you and the Information Regulator as required by POPIA.

Children's data

Our service is intended for owners of South African businesses and is not directed at persons under the age of 18. We do not knowingly collect or process personal information from minors, and we do not knowingly market our service to them. If you believe we hold personal information about a child, contact [email protected] and we will remove it without delay.

Cookies & tracking

This website, and the free preview websites we build for businesses (before they are claimed by their owner), use the Meta Pixel — a small piece of code from Meta Platforms that helps us measure our advertising and show relevant ads on Facebook, Instagram and WhatsApp to people who have visited these pages. The pixel may set cookies and shares standard visit information (such as the page you viewed, your browser details and IP address) with Meta. How Meta processes this data is described in the Meta Privacy Policy, and you can control the ads you see via your Meta ad preferences or by blocking cookies in your browser. Once a business claims its website and it goes live, the pixel is removed — we do not track visitors to our customers' websites.

Beyond this, we do not use third-party fingerprinting or run profiling analytics that identify individual visitors. Our site loads web fonts from Google Fonts, which may cause your browser to make a request to Google's servers; no cookies are set by us as part of this.

Standard server logs (IP address, request time, browser user agent) are retained briefly for security, abuse prevention, and to keep the service running, then discarded or anonymised. We do not combine these logs with other personal information for marketing purposes.

Contact & complaints

For anything related to your personal information, contact us first — we'd like a chance to put it right:

Email: [email protected]
WhatsApp: reply on the same thread we used to contact you
Postal: Afrimont Enterprises (Pty) Ltd, 17 Midas Avenue, Olympus, Pretoria, Gauteng, 0081

If you're not satisfied with our response, you can lodge a complaint with the Information Regulator (South Africa):

JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: [email protected]
Web: inforegulator.org.za