Privacy Policy

This is a draft policy prepared for review — it is not legal advice. Please have it checked by a qualified attorney before relying on it as your final published policy.

Last updated: 2026

1. Who we are

This Privacy Policy is issued by FundaHosting, trading as funda.africa (“funda”, “we”, “us”), a web agency based in Durban, South Africa. We build and maintain websites, and provide hosting, business email, domain and related services to our clients.

Information Officer: Simili Magomba Contact: info@funda.africa

This policy explains how we collect, use, store and protect personal information under the Protection of Personal Information Act 4 of 2013 (“POPIA”).

2. What information we collect

• Contact and enquiry data — name, email address, phone number, and anything you tell us via our contact form, email or WhatsApp.
• Client and billing data — business name, billing address, payment references, and service preferences, once you become a client.
• Hosting and operational data — technical data needed to run your website, email and domain: DNS records, server logs, backup metadata, and similar operational information.
• Website analytics (only where enabled on a client site) — aggregated, privacy-respecting visitor statistics. We do not use invasive tracking or sell visitor data.

3. Why we collect it, and our lawful basis

We process personal information to:

• respond to enquiries and prepare proposals (consent / pre-contractual steps);
• deliver and maintain the services in your service agreement (performance of a contract);
• send billing, renewal and support communications (performance of a contract, legitimate interest);
• meet legal and tax record-keeping obligations (legal obligation).

We do not sell personal information, and we do not use it for purposes beyond what is described here without asking you first.

4. Processing data on behalf of our clients — our role as “Operator”

Where a client’s website collects personal information from their end-users (for example, a booking form or newsletter sign-up), funda processes that data on the client’s instructions. Under POPIA, this makes funda an “Operator” for that data, and the client is the “Responsible Party”.

As an Operator, funda:

• only processes end-user data under the client’s instruction and for the purpose agreed with the client;
• treats all such data as confidential, and does not disclose it except as required to perform the service or by law;
• puts in place the security measures described in section 6 below; and
• enters into a written operator agreement with each client, as required by POPIA section 21, covering these obligations.

5. Your rights

Under POPIA, you have the right to:

• ask us to confirm what personal information we hold about you;
• request access to, correction of, or deletion of your personal information;
• object to certain processing, or withdraw consent where processing is based on consent;
• lodge a complaint with the Information Regulator (see section 8) if you believe your information has been mishandled.

To exercise any of these rights, email info@funda.africa.

6. How we protect your information

We apply reasonable technical and organisational measures to keep personal information secure, including access controls, encrypted connections (SSL/TLS) on all hosted sites, and regular backups. No system is completely secure, but we take reasonable steps appropriate to the sensitivity of the data involved.

7. Retention and cross-border transfer

We keep personal information only for as long as needed for the purpose it was collected, or as required by law (for example, tax and billing records). Some of the infrastructure providers we use (hosting, email delivery, backups) may process data outside South Africa; where this happens, we take reasonable steps to ensure it is protected to a standard consistent with POPIA.

8. Complaints

If you’re unhappy with how we’ve handled your personal information, please contact us first at info@funda.africa so we can try to resolve it. You may also lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.

9. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top will reflect the most recent version.