SHEMITAH ← Back to the website
Protection of Personal Information Act (POPIA)

Privacy policy

This policy explains how Shemitah collects, uses, stores and protects personal information when you visit www.shemitah.co.za or contact us. Last updated: 28 September 2026.

1. Who we are

Shemitah (registration number 2015/076655/07) is the responsible party for personal information collected through this website.

  • Address: 18 Aspen Street, Bryanston, Sandton, 2191, South Africa
  • Email: [email protected]
  • Phone: +27 68 597 0077
  • Information Officer: The Information Officer, [email protected]

2. What we collect

We only collect information that you give us or that is needed to run the website.

SourceInformation
Enquiry formName, company, email address, phone number, company size, the services you are interested in, and your message.
Email and phoneAnything you choose to share when you contact us directly.
Website analyticsIf you accept analytics cookies: pages visited, time on site, approximate location (city or country), device and browser type, and how you arrived at the site. This is collected by Google Analytics using a random identifier and is not used to identify you personally.
Server logsIP address, browser type, pages requested and the date and time of the request. Our hosting provider records these automatically for security and troubleshooting.

We do not knowingly collect special personal information or information about children through this website.

3. How we use it

  • To respond to your enquiry and prepare quotes or proposals (with your consent, given on the enquiry form).
  • To provide services you have contracted us for.
  • To understand how visitors use the website so we can improve it (with your consent, given through the cookie banner).
  • To keep the website secure, prevent spam and abuse, and fix technical problems (our legitimate interest).
  • To comply with legal obligations.

We do not sell your personal information. We will only send you marketing messages if you have asked us to, and you can opt out at any time.

4. Who we share it with

We share personal information only with service providers who help us run our business, under agreements that require them to protect it:

  • Google, which provides Google Analytics.

We may also disclose information where the law requires it.

5. Cross-border transfers

Some providers process information outside South Africa. This website loads fonts from Google Fonts and scripts from Cloudflare's cdnjs service, which means your IP address is sent to their servers when a page loads. Google Analytics data is processed by Google on servers that may be located outside South Africa, including in the United States. Our hosting provider may also store data outside South Africa. Where information is transferred across borders, we rely on providers that are subject to data protection laws or agreements offering protection comparable to POPIA.

6. How long we keep it

We keep enquiry information for 3 months after our last contact with you, unless you become a client, in which case we keep records for as long as needed for the service and for legal, tax and accounting purposes. Server logs are kept for as long as our hosting provider retains them. Google Analytics data is kept for 14 months and then deleted automatically.

7. Security

We use reasonable technical and organisational measures to protect personal information, including encrypted HTTPS connections, access controls on our systems and mailboxes, and spam protection on the enquiry form. To stop spam, the form keeps a scrambled (hashed) record of the sender's IP address and email address for 24 hours, and records the IP address and email address of submissions it blocks in a private log that is overwritten automatically as it fills. This information is only used to prevent abuse. If a security compromise affects your personal information, we will notify you and the Information Regulator as POPIA requires.

8. Cookies

We use Google Analytics to understand how visitors use this website. Google Analytics sets cookies (named _ga and _ga_ followed by an ID) that store a random identifier and expire after up to 2 years. We only load Google Analytics after you accept analytics cookies in the cookie banner. If you decline, no analytics cookies are set.

You can change your choice at any time using the "Cookie settings" link at the bottom of every page, or by clearing cookies in your browser. You can also install Google's Analytics opt-out browser add-on.

We do not use advertising or marketing cookies.

9. Your rights

Under POPIA you have the right to:

  • ask whether we hold personal information about you, and request a copy of it;
  • ask us to correct or delete information that is inaccurate, out of date or no longer needed;
  • object to us processing your information, and withdraw your consent at any time;
  • object to direct marketing;
  • lodge a complaint with the Information Regulator.

To make a request, email our Information Officer at [email protected]. We may need to confirm your identity first. Our PAIA manual, which explains how to request access to records, is available on request from our Information Officer.

10. Contact and complaints

If you have questions about this policy, contact us at [email protected] or +27 68 597 0077. If you are not satisfied with our response, you may complain to the Information Regulator (South Africa) via inforegulator.org.za.

We may update this policy from time to time. The date at the top shows when it last changed.