Legal

Privacy Policy

1. Who we are and how to reach us

AJ Technologies ("we", "us", "our") operates this website and provides web development, UX design and systems engineering services in the Republic of South Africa.

We process personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).

Information Officer: Ammaarah Jacobs (registered with the Information Regulator South Africa).
Registration reference: [insert your Information Officer registration number from your certificate].
Privacy contact: use the contact section on our website.

2. The personal information we collect

  • Contact details you give us — your name, email address, subject and message when you contact us through the website form, WhatsApp or email.
  • Usage data (only with your consent) — anonymised analytics about pages visited and general device type, collected via Google Analytics only after you accept cookies.

This site does not collect special personal information (health, beliefs, biometrics and the like), does not knowingly process children's personal information, and does not collect information from any other source than you.

3. Why we process it (lawful basis)

  • To answer your enquiry — with your explicit consent, which you give by ticking the consent box on the contact form (POPIA s11(1)(a)).
  • To provide contracted services — where we process personal information of client contacts strictly as necessary to deliver and invoice work (POPIA s11(1)(b)).
  • To keep the site safe and working — security and quality measures operate on an adequate-law basis (POPIA s11(1)(i) read with s14).

We do not sell or rent personal information, and we never share it with third parties for their own marketing.

4. Cookies, analytics and consent

The site stores a single preference cookie to remember your cookie choice, set with Secure and SameSite attributes. Google Analytics loads only if you click "Accept"; IP addresses are anonymised. The contact form itself stores nothing — it opens WhatsApp with your message pre-filled.

Under POPIA s11(3) you may withdraw consent at any time: use the Cookie Settings link in the footer to reopen the banner, or clear your browser storage for this site.

5. Who receives your information (cross-border transfer)

When you send an enquiry, your name, email and message are delivered through, and stored by, the following recipients outside South Africa:

  • WhatsApp / Meta Platforms Ireland Ltd (USA) — message delivery; see Meta's privacy policy.
  • Google LLC (USA) — email if you use Gmail, and consent-based analytics.

These recipients only receive your information because you actively choose to contact us through them (POPIA s72). We stay responsible for what we pass on, and we only pass on what is necessary to answer you. If these arrangements change materially, we will update this policy.

6. How we protect your information (security safeguards)

  • The site is served over HTTPS with a strict Content-Security-Policy and modern security headers (HSTS, anti-clickjacking, MIME-sniffing protection).
  • Access to enquiry correspondence and client material is limited to the Information Officer.
  • We keep software, hosting and devices updated and lock down accounts with strong credentials.
  • Analytics is loaded only after consent, and IP addresses are anonymised before storage by Google.

7. Breach notification

If there are reasonable grounds to believe your personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and, where your identity can be affected, notify you directly as soon as reasonably possible (POPIA s22), describing the breach and the measures you can take.

8. Retention

Enquiry correspondence is kept only as long as needed to handle your request and any follow-up work, and no longer than 5 years, unless a longer period is required by law. Analytics data is retained per Google's default retention settings. Consent records are kept to demonstrate that consent was given.

9. Direct marketing (POPIA s69)

We will not send you marketing messages unless you have asked us to or accepted them at a point of contact. You may opt out at any time — reply "STOP" or contact us through the contact section on our website — and we will stop free of charge, without asking why.

10. Your rights as a data subject

You may, free of charge and without explanation:

  • ask whether we hold personal information about you, and request a copy of it (POPIA s23);
  • ask us to correct or delete information that is inaccurate, irrelevant, excessive, outdated or unlawfully obtained (POPIA s24);
  • withdraw consent for any processing you previously agreed to (POPIA s11(3));
  • object to processing on reasonable grounds (POPIA Form 2);
  • object to direct marketing (POPIA s69).

Contact us through the details on our website and we will respond as soon as reasonably possible, and no later than 30 days.

11. Complaining to the Information Regulator

If you are unhappy with how we handle your personal information, please talk to us first — but you have the right to complain directly to the Information Regulator South Africa:

You can find the regulator's contact details and complaints form on its website: inforegulator.org.za.

12. Changes to this policy

If this policy changes materially, we will update this page and note the change at the top. This policy was last reviewed in September 2026.

← Back to home