Legal

Privacy & POPIA Policy

How we collect, use, and protect your personal information, and the rights you have under South Africa's Protection of Personal Information Act (POPIA).

Last updated: 23 July 2026

Who we are

Stef's Time ("we", "us", "our") is a South Africa-based technology and IT consulting business. We are the responsible party for the personal information processed through this website (website.stefstime.co.za).

Our Information Officer can be reached at info@stefstime.co.za. For any privacy question or request, contact us there or via WhatsApp on +27 78 132 5627.

The information we collect

This site is intentionally light on data collection. There are no user accounts and no login. We may process:

  • Enquiry details you choose to send. Our contact page helps you build a message (the service you're interested in, project stage, budget band, and anything you type). This message opens in your own WhatsApp or email app — it is only sent to us once you send it yourself, and it then reaches us the same way any WhatsApp message or email would.
  • AI assistant conversations. If you use our on-site AI assistant (ST-1), the messages you type are sent to our server and on to our AI provider to generate a reply. Please don't share sensitive personal information in the chat.
  • Basic usage analytics. If analytics are enabled, we use Google Analytics to understand aggregate, anonymised traffic patterns (pages visited, approximate region, device type). This helps us improve the site.
  • Standard server logs. Like most websites, our host may record technical information such as IP address, browser type, and requested pages for security and reliability.

How we use your information

  • To respond to your enquiries and prepare quotes or proposals.
  • To provide and improve the AI assistant and the website experience.
  • To understand, in aggregate, how the site is used so we can make it better.
  • To keep the site secure and to meet our legal obligations.

We do not sell your personal information, and we do not use it for automated decision-making that has legal consequences for you.

Third parties and cross-border processing

We rely on a small number of reputable service providers ("operators") who may process data on our behalf, some of whom are located outside South Africa:

  • Website hosting — to serve this site and keep it running.
  • Google Analytics — for anonymised usage statistics.
  • Our AI provider — to generate replies in the AI assistant.

Where personal information is processed in another country, we take reasonable steps to ensure it receives a level of protection consistent with POPIA.

Cookies

The site itself does not rely on tracking cookies to function. If analytics are enabled, Google Analytics may set cookies to measure aggregate usage. You can block or delete cookies in your browser settings at any time without losing access to the site.

How long we keep it

We keep enquiry correspondence only for as long as needed to assist you and to meet legal or accounting requirements, after which it is deleted or anonymised. AI assistant messages are used to generate a reply in the moment and are not stored as a profile of you.

How we protect your information

We apply reasonable technical and organisational safeguards, including encrypted connections (HTTPS) and access controls, to protect personal information against loss, misuse, and unauthorised access. No method of transmission over the internet is completely secure, but we take these responsibilities seriously.

Your rights under POPIA

Subject to the Act, you have the right to:

  • Ask what personal information we hold about you and request access to it.
  • Request that we correct or delete information that is inaccurate or no longer needed.
  • Object to the processing of your personal information.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with the Information Regulator.

To exercise any of these rights, email info@stefstime.co.za.

Complaints to the Information Regulator

If you believe we have not handled your personal information lawfully, you may contact the Information Regulator (South Africa): website inforegulator.org.za, email enquiries@inforegulator.org.za (POPIA complaints: POPIAComplaints@inforegulator.org.za). We'd appreciate the chance to resolve your concern directly first.

Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the current version. Material changes will be posted on this page.

Contact us

Questions about this policy or your personal information? Email info@stefstime.co.za, message us on WhatsApp, or use our contact page.