Privacy Policy

Last updated: [DATE YOU PUBLISH THIS PAGE]

This policy explains how Lukhanyo M Projects ("we", "us", "our") collects, uses, stores and protects personal information. It is written to comply with South Africa's Protection of Personal Information Act, 2013 (POPIA), and it applies to this website, our checkout and payment process, and any enquiry, quote or contact form you submit to us.

1. Who is responsible for your information

Lukhanyo M Projects
76 Crossberry Street, Van Dyk Park, Boksburg
info@lukhanyomprojects.com | 068 001 1159

Information Officer: [NAME AND EMAIL/PHONE OF YOUR APPOINTED INFORMATION OFFICER]. POPIA requires every business that processes personal information to appoint an Information Officer. For a small business this is usually the owner. That person also needs to be registered with the Information Regulator's eServices portal. That's a separate administrative step on your side, not something this website handles automatically.

2. What we collect

We collect personal information you give us directly:

Account registration: full name, email address, phone number, delivery address, city, and a password. Your password is stored as a one-way hash, so we never actually see or store the password itself.
Checkout and orders: full name, email, phone, delivery address, city, and any order notes you add.
Contact and quote request forms: full name, email, phone, and the details of your enquiry.
Card payments: if you pay by card, your card details are entered directly on Paystack's secure payment page. They are never seen, transmitted through, or stored by this website. We only receive confirmation of whether the payment succeeded, along with a payment reference number.

We don't knowingly collect special personal information (health, religious belief, biometric data and so on) through this site, and this site isn't aimed at children.

3. Why we collect it, and our legal basis

To process and fulfil your order, including arranging delivery or installation. This is necessary to perform our contract with you.
To verify your email address and secure your account. Also necessary to perform our contract with you.
To respond to enquiries, quote requests and contact form submissions. This is either a step you've asked us to take before entering a contract, or based on your consent.
To process card payments securely through Paystack. Necessary to perform our contract with you.
To meet our legal obligations, such as financial and tax record-keeping under South African law.
[IF YOU PLAN TO SEND MARKETING EMAILS OR SMS: add a bullet here, and make sure any marketing sign-up on the site uses an unticked opt-in checkbox. POPIA requires explicit opt-in consent for marketing, not a pre-ticked box.]

4. Who we share it with

We don't sell your personal information. We only share it where it's necessary to run the site and fulfil your order:

Paystack: processes card payments on our behalf. Their own privacy policy governs how they handle payment data.
Hostinger: our web hosting and email provider. Account, order and message data is stored on their servers, and transactional emails such as order confirmations and email verification are sent through their mail servers.
[IF ENABLED: Facebook Lead Ads and/or TikTok Lead Ads integrations are configured in your admin CRM settings. If you turn these on, add a bullet here naming them, since enquiry data would then flow to and from those platforms.]
Law enforcement or regulators, where we're legally required to disclose information.

5. How long we keep it

[CONFIRM RETENTION PERIODS. A common approach: keep account and order data for as long as the account is active, plus a period afterwards for financial and tax record-keeping (SARS requires businesses to keep supporting tax documents for 5 years from the date the relevant return was submitted). Contact and quote enquiries that don't turn into a sale can reasonably be deleted sooner, for example after 12 to 24 months. Tell us your preference and we'll update this section and set up matching deletion practices.]

6. Cookies

This site currently uses only one strictly necessary session cookie, which keeps you logged in and remembers what's in your cart. It doesn't track you and isn't shared with third parties. We don't currently run analytics or advertising cookies. [If you later add Google Analytics, Facebook Pixel, or similar tracking, this section and a cookie consent banner will both need to be added. Let us know if or when you do.]

7. Security

We take reasonable technical and organisational steps to protect your information. That includes encrypting the connection to this site (HTTPS), hashing passwords instead of storing them in plain text, and never handling your card details ourselves (they go straight to Paystack's secure payment page). No system is completely secure, and we can't guarantee absolute security for information sent over the internet.

8. Your rights under POPIA

You have the right to:

Ask us what personal information we hold about you, and request a copy of it.
Ask us to correct information that's inaccurate or out of date.
Ask us to delete information we no longer have a valid reason to keep.
Object to how we process your information, or withdraw consent where processing is based on consent, such as marketing.
Lodge a complaint with South Africa's Information Regulator if you believe we haven't handled your information properly: inforegulator.org.za.

To exercise any of these rights, contact us at info@lukhanyomprojects.com.

9. Changes to this policy

We may update this policy from time to time, for example as our systems or the law change. The "last updated" date at the top of this page always reflects the most recent version.

10. Contact us

Questions about this policy or your information can be sent to info@lukhanyomprojects.com or 068 001 1159.