5 October 2026 · Compliance
The Protection of Personal Information Act (POPIA) applies to almost every business website in South Africa that collects names, phone numbers, email addresses or any other personal data. Getting it wrong can lead to complaints and fines. Getting the basics right is straightforward.
Your site must have a clear privacy policy that explains what data you collect, why you collect it, how long you keep it, and who you share it with. Link to it from the footer and from any contact form.
When someone fills in a form, they should know their details will be used to respond to their enquiry. A simple checkbox or clear notice is usually enough for basic enquiries. Marketing emails need explicit opt-in.
Any page that collects personal information must use HTTPS. A free SSL certificate is now standard and is included in our packages.
Choose hosting that keeps data in a secure environment, offers regular backups, and has reasonable access controls. South African or well-regulated international providers are preferable.
Only ask for the information you actually need. Name, phone/WhatsApp and email are usually enough for a first enquiry.
Be prepared to respond if someone asks to see, correct or delete their personal information. Keep a simple process for this.
Our R550/month packages include SSL, secure hosting practices and guidance on the wording and placement of privacy notices so your new website starts on the right side of POPIA.