1. Who we are
Kuvela (“we”, “us”, “our”) operates kuvela.co.za. We are committed to protecting the privacy of our visitors. This policy explains what personal information we collect, why, how we use it, and your rights under the Protection of Personal Information Act (POPIA).

2. What information we collect
We only collect personal information necessary for our services, including:

Name, email address, phone number (when you contact us, subscribe or request services). IP address and browser/usage metadata for site analytics and technical support. OPTIONAL: Any other category of personal data you provide to us.

Under POPIA we only process data if one of these apply:

You consent
It’s required for a contract
Kuvela’s legitimate interest, or legal requirement

3. How we collect personal information
Directly, when you submit forms on our site (e.g. contact or signup forms)
Automatically, via cookies and similar tracking technologies on our site

4. Why we process your information (Purpose limitation)
We use your data for the following purposes only:

To respond to enquiries and provide requested services
To send occasional updates or marketing (if you opt in)
To maintain and improve the website, including security measures
To comply with legal or contractual obligations

5. Legal grounds for processing
Processing is based on:

Your consent
Performance of contract with you
Compliance with legal obligations
Our legitimate interests (e.g. improving service, maintaining site security)

6. Sharing or disclosing your information
We may share personal information with:

Service providers who assist with our site (e.g. hosting, email services)
Legal or regulatory bodies when required by law
Parties involved in fraud detection or security enforcement

All third parties handling personal information are required to protect it in compliance with POPIA.

7. Cookies & tracking technologies
We use cookies and similar technologies to:

Support the functioning of the site
Gather analytics and usage statistics
We do not use them for sensitive profiling without explicit consent.

8. Data retention
We retain personal information only for as long as needed to fulfil our services, comply with legal obligations, or protect our legitimate interests — typically no longer than 2 years after the last interaction.

9. Security safeguards
We implement reasonable technical and organizational measures (e.g., secure servers, encryption, access controls) to protect data from loss, misuse or unauthorised access.

10. International data transfers
If we transfer data outside South Africa, we ensure adequate protection via:

Consent from you
Contractual necessity
Security controls ensuring foreign jurisdictions meet POPIA standards

11. Your privacy rights
Under POPIA, you can:

Access and receive your personal information
Request corrections or deletion
Withdraw consent to marketing at any time

12. Appointment of Information Officer
Our appointed Information Officers for POPIA matters are:

Emile Schmidt, Peter Janse van Rensburg, Jannie Engelbrecht
info@kuvela.co.za

13. Data breach notifications
In case of data breaches, we will notify both the Information Regulator and affected users as required by law.

14. Changes to this policy
We may update this Privacy Policy — changes will be published here with a new effective date.

15. Contact us
For questions or to exercise your privacy rights, please contact us.