Privacy notice

How we handle your personal information

Last updated: 30 October 2026

This notice explains what personal information LGH Innovations collects when you use lghinnovations.co.za, why we collect it, who sees it, where it goes and how long we keep it. It follows the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who we are

LGH Innovations is the responsible party for the information collected on this website.

• Address: Farm 1 Stylkop Farms, GV21K R528, Georges Valley, Tzaneen, Limpopo, South Africa
• Information Officer: Sean Sheppard
• Email: sean@lghinnovations.co.za

2. What we collect, and where it comes from

You give us this information yourself when you send an enquiry through the form on this website:

• your name, mobile number and email address;
• the kind of project you are asking about and the details you choose to type, such as your company name, what your business does and what you want built.

We and our providers also collect some information automatically when you visit:

• Server logs. Our hosting provider, Cloudflare, records your IP address, the page requested, the time and your browser type.
• Visit counts. The site records simple counts of actions such as opening the enquiry form or pressing a button. Each count is stored with a salted, one-way hash of your IP address, never the address itself. We use it to see which parts of the site are used.
• Spam protection. Each enquiry is also stored with the same salted, one-way hash of your IP address, which we use to limit repeated submissions. After deletion, our database provider can keep backup copies for up to 30 days before they expire.
• Optional web analytics. We may switch on Cloudflare Web Analytics, which measures page views without cookies and without tracking you across sites.
• Anti-spam check. The enquiry form uses Cloudflare Turnstile to tell people from automated programs. It runs in your browser and Cloudflare handles what it collects under its own privacy policy.

We do not set advertising or tracking cookies. We do not ask for your ID number, payment details, health information or location, so please do not put them in the form.

Giving us this information is voluntary. If you would rather not use the form you can email us directly. Without your name and contact details we cannot reply to an enquiry.

3. Why we use it

• To read your enquiry, reply to you and, if you want to go ahead, scope and quote the work. You asked us to, so this is necessary to respond to your request (POPIA section 11(1)(b)).
• To keep the website secure and stop spam and abuse, and to understand how the site is used. This is a legitimate interest of ours (section 11(1)(f)).
• To meet our legal obligations, including answering the Information Regulator.

We use your details only for these purposes. We do not sell them and we do not send marketing to anyone who has not agreed to receive it.

4. Who receives it

These providers handle information for us as operators. They may use it only to provide their service to us.

• Cloudflare hosts the website, runs Turnstile and the optional web analytics, and stores enquiries and visit counts in its D1 database, which we have placed in Western Europe.
• Resend delivers the email notification that tells us about your enquiry.
• Google hosts our email, so your enquiry arrives in, and any reply you receive is sent from, a Google-hosted mailbox.
• Anyone we are required by law to give it to.

If we add another provider we will update this notice first.

5. Sending information outside South Africa

Your information is processed outside South Africa. Enquiries are stored by Cloudflare in Western Europe. Cloudflare serves the site from servers around the world, so the technical data in server logs can be handled in other countries. Resend and Google also run services outside South Africa, including in the United States. We use these providers only where they are bound by law, a binding agreement or binding corporate rules that give protection substantially similar to POPIA (section 72(1)(a)), or where you agreed to the transfer by sending us the form.

6. How long we keep it

• Enquiries (your details and what you wrote): 12 months after we receive them, then deleted. If we start work together, what we hold for the project is covered by our agreement with you and by what the law requires us to keep, such as accounting records.
• Visit counts: 12 months.
• Server logs: for the period Cloudflare keeps them.
• Emails about your enquiry: in our mailbox for as long as they are needed for the purposes above, and not longer than the enquiry period unless the law requires it.

7. How we protect it

• The website is served over HTTPS only.
• The enquiry form is checked against automated abuse and limited in how often one visitor can submit it.
• The database is not open to the public internet, and access is restricted to the people who need it.
• We collect as little as we can and delete it when it is no longer needed.

No system is perfectly secure. If we have reasonable grounds to believe your information has been accessed by an unauthorised person, we will tell the Information Regulator and, where we can identify you, you, as soon as reasonably possible (POPIA section 22).

8. Your rights

Under POPIA you may:

• ask whether we hold information about you, and ask for a copy of it (section 23). We may need proof of who you are, and a fee may apply, in which case we will give you a written estimate first;
• ask us to correct or delete information that is inaccurate, out of date, incomplete, misleading, excessive or unlawfully obtained, or that we are no longer allowed to keep (section 24);
• object to our processing on reasonable grounds, and object to direct marketing at any time (section 11(3));
• withdraw a consent you gave us. This does not affect what we did before you withdrew it;
• complain to the Information Regulator, and take civil action.

To use any of these rights, email sean@lghinnovations.co.za. We will first confirm that it is you, then reply as soon as reasonably practicable and tell you what we did, or why we could not.

9. Complaints

Please tell us first so we can put things right. You also have the right to complain to the Information Regulator of South Africa:

• Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
• Telephone: 010 023 5200
• POPIA complaints: POPIAComplaints@inforegulator.org.za
• Website: inforegulator.org.za, where the current complaint form and process are published

10. Children

This website is for businesses and is not meant for anyone under 18. If you are under 18, please do not send us an enquiry without a parent or guardian. If we learn that we hold a child's information without a parent or guardian's consent, we will delete it.

11. Changes to this notice

We will publish any change on this page and update the date at the top. If a change affects how we use your information, we will tell you before it takes effect where we can.