Privacy policy

Who we are

This website is operated by [CONFIRM: registered company name and registration number] ("we", "us"), trading as Joburg Paving Connect. We are the responsible party for the personal information collected through this website, as defined in the Protection of Personal Information Act 4 of 2013 (POPIA).

Information Officer: [CONFIRM: Information Officer name and contact details, registered with the Information Regulator]. Deputy Information Officer: [CONFIRM: if appointed].

What we collect

When you submit the form, we collect your name, phone number and/or email address, suburb, the service you need, and the message you write. We also record the page you sent it from, the date and time, campaign tags in the page address if present, your browser's user-agent string and the country your connection comes from, so that we can manage jobs and prevent abuse.

We do not ask for your ID number, bank details, gate or alarm codes or any special personal information, and we ask you not to include them in your message.

Why we collect it

We use your information for one purpose: to pass your job to independent paving contractors who cover your area, so that they can contact you about it. We may also use it to follow up on that job, to deal with a complaint, or to meet a legal obligation.

We process your information on the basis of your consent, which you give by ticking the consent box on the form, and because it is necessary to act on your request. You may withdraw consent at any time; this does not affect processing that already took place.

Who we share it with

We share your job details with the paving contractor or contractors we pass it to. [CONFIRM: the maximum number of contractors a job is shared with] Contractors are independent businesses and become responsible parties for the information once they receive it. [CONFIRM: written agreements with contractors on the use of personal information they receive]

Our website and form are hosted on Cloudflare, which stores submissions on our behalf as an operator. Cloudflare may process data outside South Africa; we rely on its contractual safeguards for that transfer. [CONFIRM: operator agreement and cross-border transfer basis, attorney-reviewed] We do not sell your information and we do not use it for marketing.

Analytics and cookies

With your permission, we use Google Analytics to understand, in aggregate, which pages and enquiry routes are useful. It is optional: when you first visit, we ask, and nothing is sent to Google unless you choose "Allow analytics". If you choose "Reject analytics", or make no choice, the analytics tag is not loaded. Your choice is stored in your browser, and you can change it with the "Privacy choices" link at the bottom of any page. [CONFIRM: GA4 measurement ID for this site and Compliance sign-off of the consent wording]

The form's security check is provided by Cloudflare Turnstile, which helps keep automated spam out.

How long we keep it

We keep job records only for as long as we need them for the purpose above, or as required by law. [CONFIRM: retention period, set by the directors in the retention schedule] After that, records are deleted or de-identified.

How we protect it

Submissions are sent over an encrypted connection and stored in an access-controlled data store. Only people who need the information to pass on or manage your job can see it. If we become aware of a security compromise affecting your information, we will notify you and the Information Regulator as POPIA requires.

Your rights

You may ask whether we hold your personal information and for a copy of it, ask us to correct or delete it, object to its processing, and withdraw your consent. Contact the Information Officer at [CONFIRM: privacy contact email]. You also have the right to complain to the Information Regulator (South Africa): inforegulator.org.za.

Changes to this policy

We may update this policy. The current version is always on this page. Last updated: 12 October 2026. [CONFIRM: attorney review of this policy before launch]