Privacy notice
Last updated 11 August 2026.
This notice explains what MyBizWeb does with personal information. It is written to be read, not to protect me, so it is short and in plain English.
Who I am
MyBizWeb, operating from Cape Town, South Africa. I am the responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA), and the data controller under the UK GDPR for clients and enquiries in the United Kingdom.
You can reach me at hello@mybizweb.co.za about anything on this page.
What I collect and why
| What | Why | How long |
|---|---|---|
| Name, business name, email, phone number you type into the contact form | To reply to your enquiry and, if we go ahead, to do the work | Two years from our last contact, then deleted |
| Whatever you tell me about your business, plus photos and files you send | To build your website | For as long as I host your site, plus one year |
| Your IP address and browser, recorded with a form submission | Spam prevention and security only | 90 days |
| Standard web server logs | Keeping the server running and secure | 30 days |
| Business contact details published on a public Google Business Profile | To approach you once about your web presence, if I have done so | Deleted on request, immediately and permanently |
What I do not do
- I do not use cookies on this website. Not analytics, not advertising, not any.
- I do not use Google Analytics or any third-party tracking script.
- I do not sell, rent or share your information with anyone for marketing.
- I do not add you to a mailing list because you filled in the contact form.
- I do not run advertising on this site or take money to promote anyone.
There is no cookie banner on this site because there is nothing to consent to. That is the correct way round, and it is unfortunately unusual.
My lawful basis
For enquiries and client work: performance of a contract, or steps taken at your request before entering one.
For an initial approach to a business about its website: legitimate interests under the UK GDPR, and in South Africa a single approach permitted under section 69(2) of POPIA for the purpose of requesting consent. Any such approach carries a working unsubscribe link, and one use of it removes you permanently.
Who else sees your information
I keep this list as short as I can. As things stand:
- My hosting provider, who operates the server your data sits on.
- Anthropic, if you use the writing assistant in the client onboarding form. Only the answers you type into that specific box are sent, in order to draft a paragraph back to you. It is not used to train anything.
- Google, only for the font files this site loads. No account data, no cookies, no analytics.
Some of these are outside South Africa. Section 72 of POPIA permits that where the recipient is subject to comparable protection, which is the case here.
Your rights
You can, at any time and free of charge:
- Ask what I hold about you
- Ask me to correct anything wrong
- Ask me to delete it
- Object to me contacting you, which I will action immediately
- Ask for a copy in a portable format
Email hello@mybizweb.co.za and I will do it within a few days rather than the month the law allows. There is no form to fill in and I will not ask you why.
Complaints
If I have not handled something properly, please tell me first so I can fix it. If that does not resolve it, you can complain to the Information Regulator of South Africa, or, if you are in the UK, to the Information Commissioner's Office.
Security
The site runs over HTTPS. Form submissions are validated server side and stored on a server I control, in South Africa. Access is limited to me. If there were ever a breach affecting your information, I would tell you and the Regulator, as POPIA section 22 requires.
Changes
If this notice changes materially, I will update the date at the top, and email existing clients rather than quietly changing the page.