Privacy Policy

1. Who We Are

Tswalenki ("we", "us", "our") is a website management and development service operating under tswalenki.co.za. We are a responsible party as defined under POPIA, responsible for the collection, use, and protection of your personal information.

Contact: admin@tswalenki.co.za | WhatsApp: +27 84 997 9526

2. What Personal Information We Collect

We collect the following categories of personal information when you register or interact with our platform:

• Identity information: Full name, surname
• Contact information: Email address, WhatsApp number, phone number
• Business information: Domain names, business email addresses
• Technical information: IP address, browser/device information, login timestamps
• Financial information: Invoice records and payment confirmation references (we do not store card numbers)
• Communication records: Support ticket content, service requests
• Profile content: Profile pictures you upload

3. How We Use Your Information

Your personal information is used solely for the following purposes:

• Creating and managing your account on the Tswalenki WMS platform
• Processing service requests, support tickets, and website development orders
• Generating invoices and processing payments via PayFast or EFT
• Sending transactional emails about your account and service status
• Verifying domain ownership to prevent fraudulent registrations
• Maintaining platform security and preventing unauthorised access
• Complying with legal obligations under South African law

4. Legal Basis for Processing

We process your personal information on the following grounds under POPIA:

• Contractual necessity: To provide the services you have requested and agreed to
• Legitimate interest: To operate and improve our platform securely
• Legal compliance: To meet obligations under South African law
• Consent: Where you have explicitly agreed, such as when accepting our Terms of Service

5. Who We Share Information With

We do not sell your personal information to any third party. We may share limited information with:

• PayFast — payment processing (governed by PayFast's own privacy policy)
• AfriHost — our hosting provider (infrastructure only, no direct data sharing)
• South African authorities — only when required by law or valid court order

6. Data Retention

We retain your personal information for as long as:

• Your account remains active on our platform, or
• Required to fulfil our contractual or legal obligations (minimum 5 years for financial records under the Companies Act), or
• You request deletion of your account (subject to legal retention requirements)

7. Your Rights Under POPIA

You have the following rights regarding your personal information:

• Right to access: Request a copy of the personal information we hold about you
• Right to correction: Request correction of inaccurate or incomplete information
• Right to deletion: Request deletion of your information subject to legal retention requirements
• Right to object: Object to processing of your personal information in certain circumstances
• Right to complain: Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at admin@tswalenki.co.za.

8. Information Regulator Contact

If you believe your rights under POPIA have been infringed, you may contact the Information Regulator:

• Website: inforegulator.org.za
• Email: inforeg@justice.gov.za

9. Security Measures

We implement the following technical and organisational measures to protect your data:

• Passwords are encrypted using bcrypt (one-way hashing) — we cannot read your password
• All forms use CSRF tokens to prevent cross-site request forgery
• Database queries use parameterised statements to prevent SQL injection
• File uploads are restricted to images and blocked from executing as PHP
• Sessions use secure, HTTP-only, SameSite cookies
• SSL/TLS encryption on all web traffic (HTTPS)

10. Cookies

We use a single essential session cookie (tswalenki_session) to maintain your login state. We also store your theme preference (tswalenki_theme) in your browser's local storage. We do not use advertising, tracking, or third-party analytics cookies.

11. Email Communications

We send transactional emails related to your account activity (registration confirmations, ticket updates, invoices, payment confirmations). These are not marketing emails. You cannot opt out of transactional emails while maintaining an active account, as they are necessary for service delivery.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on our platform. Continued use of the platform after notice constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related queries or to exercise your rights:

• Email: admin@tswalenki.co.za
• WhatsApp: +27 84 997 9526
• Website: tswalenki.co.za