Legal
Last updated: 9 May 2026. This policy applies to Kleinhans Digital, a trading name of LRWKleinhans (Pty) Ltd, registered in South Africa.
LRWKleinhans (Pty) Ltd, trading as Kleinhans Digital, is a Johannesburg-based digital agency. We design and build websites, deliver SEO and digital marketing, and operate a local-AI workflow product called Kleinhans AI for South African SMEs.
We are the Responsible Party under the Protection of Personal Information Act, 2013 (POPIA) for personal information collected through this website. Our Information Officer's contact details appear at the end of this policy.
We collect personal information directly from you, only when you provide it, and only for the purposes set out below. Provision is voluntary in every case, but without certain information we cannot perform the service.
We collect your name, business name, email address, phone number, and the content of your message. We use this information to respond to your enquiry. If you do not provide an email address or phone number, we cannot reply.
We collect your name, business name, phone number, email address, and project requirements. We use this information to prepare a written proposal and manage the resulting project. Without it, we cannot quote or onboard you.
When you sign in using Google OAuth, we receive your name and email address from Google. We do not receive your Google password or any payment information held by Google. You may review Google's own privacy policy to understand how Google processes your data.
We may collect anonymised information about how visitors use the site, including pages viewed and time on site. This information is anonymised and cannot be used to identify you individually.
We do not collect special personal information (children's information, race or ethnic origin, religious or philosophical beliefs, health or sex life, biometric information, financial information beyond invoicing) through this website.
We use your personal information to:
We do not use your information for unsolicited marketing. We do not sell, rent, or share your personal information with third parties for their own marketing purposes.
Your data is stored in Supabase, a managed PostgreSQL service whose underlying infrastructure runs on Amazon Web Services. The AWS region in use is outside South Africa (typically the United States or the European Union). This means a transborder transfer of your personal information takes place when we collect it.
Under Section 72 of POPIA, we are permitted to make this transfer because the recipient operates under laws or binding rules that uphold principles substantially similar to POPIA, and the transfer is necessary for the performance of a contract between you and us, or for the conclusion or performance of a contract with a third party in your interest.
We use industry-standard encryption in transit (TLS) and at rest. Access to stored data is restricted to authorised personnel on a need-to-know basis.
Our local-AI product Kleinhans AI runs entirely on the customer's premises and does not transfer personal information offshore at all. Agency-side data stored under this website (quotes, project records, contact submissions) currently sits with the cloud providers named above. We are working towards an option to host agency-side personal information on South African infrastructure.
We share the minimum information necessary with the following service providers in order to operate this site:
Each provider has its own privacy policy. We have reviewed each and are satisfied that they offer protection in line with POPIA.
Under POPIA you have the following rights:
To exercise any of these rights, contact our Information Officer using the details at the end of this policy. We respond as soon as reasonably possible and ordinarily within 30 calendar days.
This website uses session cookies necessary for authentication and session management. We do not use advertising or tracking cookies. We do not run cookie-based behavioural profiling.
We retain personal information only for as long as necessary for the purposes set out in this policy, or as required by law:
You may request deletion of your account data at any time. Where deletion would conflict with a legal retention obligation, we will explain the basis and retain only the minimum required.
We apply reasonable technical and organisational measures to protect your information from loss, unauthorised access, interference, modification, or disclosure. These include TLS encryption for all data in transit, encryption at rest within our database provider, multi-factor authentication on administrative accounts, restricted access on a need-to-know basis, and regular review of our suppliers' security practices.
If we become aware of a security compromise affecting your personal information, we will notify you and the Information Regulator as soon as reasonably possible, in line with Section 22 of POPIA.
We update this policy from time to time. The “Last updated” date at the top reflects the most recent change. We do not retroactively reduce your rights. Material changes are communicated by email to active account holders.
For privacy queries, requests, or complaints, contact our Information Officer:
You also have the right to complain to the Information Regulator of South Africa: