Privacy Policy

Privacy Policy

Last updated: 20 September 2026

This Privacy Policy explains how Digital Africa Group, trading as DigiAfrica, collects, uses, stores and protects personal information when you use our website, contact us, become a client, work with us as a supplier or otherwise interact with our services.

1. Who is responsible for your personal information?

Responsible party: Digital Africa Group
Registration number: K2019581952
Trading name: DigiAfrica
Director: Storm de Robillard
Business address: 194 Station Road
Telephone: +27 78 646 0656
Email: admin@digiafrica.co.za
Website: https://www.digiafrica.co.za/

Digital Africa Group is the responsible party for personal information processed for its own business purposes. Privacy and Information Officer enquiries can be sent to admin@digiafrica.co.za.

2. What personal information do we collect?

The information we collect depends on how you interact with us and may include:

  • name and surname;
  • email address and telephone number;
  • company name, role and business contact details;
  • information you include in an enquiry, message, brief or support request;
  • project, service, proposal, quotation and client-account information;
  • billing, invoicing and transaction records;
  • website, domain, hosting, platform or system information you provide so that we can perform agreed services;
  • communications, approvals and support history;
  • technical information such as IP address, browser or device information, server logs, security events and basic website-usage information;
  • marketing preferences and opt-out records where relevant.

Please do not send passwords or highly sensitive information through ordinary contact forms or email unless we have asked you to use an appropriate secure method.

3. How do we collect personal information?

We may collect personal information directly from you when you submit our contact form, email or call us, request a quote, become a client, provide project information, approve work, request support, subscribe to a service or otherwise communicate with DigiAfrica.

We may also receive business contact information from public business sources, referrals, service providers, clients or professional platforms where the collection and subsequent use is lawful. Where we use personal information for direct marketing or lead-generation activity, we apply the requirements of POPIA and applicable direct-marketing rules.

4. Why do we process personal information?

We process personal information where it is reasonably necessary for purposes such as:

  • responding to enquiries and requests;
  • preparing quotations, proposals and service recommendations;
  • entering into and managing client relationships;
  • delivering websites, hosting, digital marketing, design, lead-generation and related services;
  • providing support and communicating about projects or accounts;
  • billing, accounting, administration and record keeping;
  • protecting websites, accounts, infrastructure and users from fraud, abuse or security threats;
  • monitoring website reliability and performance;
  • measuring marketing and website activity where appropriate;
  • improving our services, processes and website;
  • meeting legal, regulatory, tax and compliance obligations;
  • establishing, exercising or defending legal rights.

Depending on the circumstances, processing may be based on your consent, steps required to enter into or perform an agreement, a legal obligation, or the legitimate interests of DigiAfrica, a client or another person where permitted by POPIA and other applicable law.

5. Contact forms and enquiries

Our contact form currently asks for your name, email address and message. Information submitted through the form is used to receive, manage and respond to the enquiry and may be delivered to DigiAfrica business email accounts.

Submitting an enquiry does not automatically subscribe you to a marketing mailing list.

6. Cookies, server logs and website measurement

Our website and hosting environment may use cookies, cache files, security tools and server logs that are necessary to operate, secure and improve the website. These technologies may process information such as IP address, browser information, device information, pages requested and technical events.

We may also use analytics, advertising-measurement or similar technologies on particular pages or campaigns. Where a non-essential technology requires consent under applicable law, we will use an appropriate consent mechanism and update our disclosures as required.

You can also control many cookies through your browser settings, although disabling essential cookies may affect website functionality.

7. Direct marketing

Where DigiAfrica sends electronic direct marketing, we do so in accordance with applicable law. We may request consent where required, or communicate with existing customers in circumstances permitted by law.

Marketing messages will provide a reasonable way to opt out. If you ask us to stop sending direct marketing, we will record the request so that we can respect it. Service, account, billing or project communications that are necessary to manage an existing relationship are not treated as optional marketing messages.

8. Who may receive personal information?

We do not sell or rent personal information.

We may share personal information only where reasonably necessary with trusted service providers, contractors or professional advisers that support our operations. Depending on the service, these may include hosting and cloud providers, email providers, website and security services, accounting or payment providers, CRM or project-management systems, advertising and marketing platforms, analytics providers, software vendors and professional advisers.

We may also disclose information where required by law, a regulator, court order or lawful process, or where reasonably necessary to protect rights, systems, clients or other people.

9. Operators and client data

In some projects, DigiAfrica may process personal information on behalf of a client, for example when working with a client's website, CRM, mailing list, ecommerce store, support system or marketing platform. In those circumstances the client may be the responsible party and DigiAfrica may act as an operator for the agreed service.

Where appropriate, additional data-processing, confidentiality or security terms may form part of the client agreement.

10. Cross-border processing

Some cloud, hosting, software, email, advertising or support providers may process information outside South Africa. Where personal information is transferred across borders, we take reasonable steps to use providers and arrangements that support the protection required by POPIA and other applicable law.

11. How long do we keep personal information?

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, the ongoing client or business relationship, legal or accounting requirements, dispute resolution, security, backup cycles and the establishment or defence of legal claims.

Different categories of records may therefore have different retention periods. When information is no longer required, we will delete, de-identify or securely dispose of it where reasonably practicable and legally appropriate.

12. How do we protect personal information?

We use reasonable technical and organisational safeguards appropriate to the information and systems involved. These may include access controls, account security, updates, backups, hosting controls, security monitoring and limiting access to people who need the information for legitimate work.

No internet-connected system can be guaranteed completely secure. If DigiAfrica becomes aware of a personal-information security compromise that requires notification under applicable law, we will take the required steps.

13. Your rights

Subject to POPIA and other applicable law, you may have the right to:

  • ask whether we hold personal information about you;
  • request access to personal information we hold about you;
  • request correction or updating of inaccurate information;
  • request deletion or destruction where the law permits it;
  • object to certain processing;
  • withdraw consent where processing is based on consent, without affecting processing that was lawful before withdrawal;
  • object to direct marketing and ask us to stop marketing communications;
  • raise a complaint about how your personal information is handled.

We may need to verify your identity before actioning a privacy request. Some rights are subject to lawful exceptions, including requirements to keep records or protect the rights of another person.

Requests for access to company records under the Promotion of Access to Information Act are handled in accordance with our PAIA Manual.

14. Privacy requests and complaints

Please send access, correction, deletion, objection, direct-marketing opt-out or other privacy requests to admin@digiafrica.co.za. You can also contact us through our Contact page.

If you believe your personal information has been processed unlawfully and the matter is not resolved with us, you may submit a complaint to the Information Regulator (South Africa). The Regulator's current complaint and support services are available through its eServices portal. The Information Regulator can also be contacted at enquiries@inforegulator.org.za or on 010 023 5200.

15. Third-party websites and services

Our website may link to, embed or interact with third-party websites and services. Their privacy practices are governed by their own policies. DigiAfrica is not responsible for a third party's independent privacy practices.

16. Changes to this Privacy Policy

We may update this Privacy Policy as our services, systems or legal obligations change. The latest version will be published on this page with an updated date.

For privacy questions, contact admin@digiafrica.co.za.