Privacy & cookie policy
TEFWEBS is a web development studio based in South Africa. This page explains what personal information we collect through this website, why, and what your rights are under the Protection of Personal Information Act (POPIA).
1. Who is responsible
TEFWEBS is the responsible party for personal information collected on this site. To contact us about your information, use the contact form and mention “privacy” in your message.
2. What we collect
| When | What | Why |
|---|---|---|
| You send a project enquiry | Name, email or phone, project type, your message | To reply to you |
| You create an account | Name, email, business type, business name (optional), password (stored only as a salted hash) | To let you log in and manage bookings |
| You book a consultation | Service, date and time, phone number, preferred contact method, budget range (optional), project details | To schedule and prepare the call |
| You use the site | Your IP address, used briefly to limit repeated or abusive requests | Security and spam protection |
We do not ask for ID numbers, payment card details or special personal information, and we ask that you do not put them in free-text fields.
3. How we use it
- To respond to enquiries and run the bookings you ask for.
- To operate and protect your account and this website.
- To meet legal obligations.
We do not sell your information and we do not use it for advertising. We only send you messages related to your enquiry or booking.
4. Who processes it for us
- Netlify, which hosts the website and runs its server functions.
- Neon, which hosts the database where accounts, bookings and enquiries are stored.
- Google Fonts, which delivers the typefaces on this site. Your browser requests them directly from Google, so Google receives your IP address.
These providers may process data on servers outside South Africa. We rely on them to protect it to a standard comparable to POPIA.
5. Cookies and similar storage
| Name | Purpose | Lifetime |
|---|---|---|
sid | Keeps you logged in. Strictly necessary, set only when you log in or sign up. HttpOnly. | Up to 30 days or until you log out |
tef_notice (local storage) | Remembers that you have seen the privacy notice so we do not show it again | 12 months |
We do not use advertising, tracking or analytics cookies. If that ever changes, we will ask for your consent first and update this page.
6. How long we keep it
- Enquiries and bookings: as long as needed to deal with your request and for a reasonable period afterwards, then deleted on request or when no longer needed.
- Accounts: until you ask us to delete them.
- Login sessions: up to 30 days. Rate-limit records: about one day.
7. Security
Connections use HTTPS. Passwords are hashed and cannot be read by us. Admin access is restricted by a password. No system is perfectly secure, but we take reasonable steps to protect your information and will notify you and the Information Regulator if a breach affects you, as POPIA requires.
8. Your rights
You may ask us to tell you what we hold about you, correct it, or delete it, and you may object to our processing. Send the request through the contact form. If you are not satisfied, you can complain to the Information Regulator of South Africa at inforegulator.org.za.
9. Changes
If we change this policy we will update the date above.