Privacy Policy

1. Who We Are

Kumlehn-Frank Web Design & Hosting ("we", "us", "our") provides website design, hosting and support services from South Africa. This policy explains how we handle personal information collected through kumlehn-frank.life and our sign-up, contract, invoicing and support systems, in line with the South African Protection of Personal Information Act (POPIA).

2. Information We Collect

Depending on how you interact with us, we may collect:

• Contact details — name, email address, phone number, and business/billing address, submitted via our sign-up forms, contact form, or support ticket form.
• Service details — the hosting plan, domain name(s), and design/support requirements you sign up for.
• Contract & billing records — signed Service Agreements, invoices, and payment status (paid/unpaid/overdue) for your account.
• Support correspondence — messages you send via the contact form or support ticket form.
• Client portal login — if you're an active client, a session token is stored in your browser's local storage so you stay logged in to the client portal. This token identifies your session only — no card or banking details are ever stored by us.

We do not collect payment card or bank account details directly — these are entered on PayFast's own secure payment pages, described further below.

3. How We Use It

We use your information to:

• Set up and manage your hosting, design or support service;
• Generate and send Service Agreements and invoices;
• Process payments and reconcile your account balance;
• Respond to contact form and support ticket enquiries; and
• Send service-related emails (e.g. contract, invoice, account status notifications).

We do not use your information for unrelated marketing without your consent, and we do not sell your personal information.

4. Who We Share It With

We share personal information only where necessary to deliver our services:

• PayFast — our payment gateway, to process online payments for invoices. PayFast handles and stores your card/banking details under their own privacy and security terms.
• Domain registrars & hosting/infrastructure providers — to register domains and host your website, where applicable to your service.
• Legal or regulatory bodies — only where required by South African law.

We do not share your information with third parties for their own marketing purposes.

5. Storage & Security

Your information is stored securely on our servers and is accessible only to authorised administrators of Kumlehn-Frank Web Design & Hosting. We take reasonable technical and organisational measures to protect it against loss, unauthorised access, or disclosure. No method of transmission or storage over the internet is 100% secure, and we cannot guarantee absolute security.

6. Cookies & Tracking

Our public website uses Google Analytics to understand how visitors use the site (pages viewed, general location, device type). Google Analytics sets cookies to do this; no personally identifying information is collected through it. You can opt out using your browser's cookie settings or a browser extension such as Google's Analytics Opt-out Add-on. We do not use third-party advertising cookies. The client portal separately uses your browser's local storage to keep you logged in during a session — this is functional, not tracking, and is cleared when you log out.

7. Your Rights Under POPIA

As a data subject under POPIA, you have the right to:

• Ask what personal information we hold about you;
• Request correction of inaccurate or outdated information;
• Request deletion of your information, subject to any legal or contractual obligation we have to retain it (e.g. signed contracts, invoices for tax purposes); and
• Object to processing of your information for purposes you haven't agreed to.

To exercise any of these rights, contact us using the details in Section 10 below.

8. Retention

We keep client, contract and billing records for as long as your account is active, and thereafter for as long as required to meet our legal, accounting and tax obligations under South African law. Contact form and support ticket messages are retained only as long as reasonably needed to resolve the relevant enquiry.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date above shows when it was last revised. Significant changes affecting how we handle an active client's information will be communicated by email.

10. Contact / Information Officer

For any privacy-related question or request, or to lodge a concern about how your personal information is handled, contact us at webdesign@kumlehn-frank.life or via our contact form. As a small business, the owner of Kumlehn-Frank Web Design & Hosting acts as the Information Officer responsible for POPIA compliance. You may also lodge a complaint with South Africa's Information Regulator if you believe your rights under POPIA have not been respected.