Privacy Policy

Clear privacy terms for the current Digihuis website.

This policy explains what personal information Digihuis collects through the current website and contact-enquiry flow, why it is used, where it may go, how long it is kept, and what rights you may have.

This notice covers the current website and contact-enquiry flow. The AI Growth Snapshot interactive runtime is not part of the processing described here.

Responsible Party
Digihuis (Pty) Ltd
Registration number: 2015/272575/07
Last Updated
17 August 2026
Privacy Requests
Information Officer Enquiries
At a Glance
  • This policy covers the website, contact form, and current analytics only.
  • The contact form currently asks for your name, work email, optional company name, and enquiry message.
  • Digihuis does not currently claim an active CRM handoff for website enquiries.
  • Submitting the contact form does not automatically subscribe you to marketing communications.

1. About this Privacy Policy

This Privacy Policy explains how Digihuis collects, uses, shares, protects, and retains personal information through the current Digihuis website and contact-enquiry process.

This is a South African privacy notice built primarily around the current Digihuis processing environment and the requirements and principles that apply to it, including the Protection of Personal Information Act, 2013, and related guidance. Digihuis also uses broader privacy and transparency principles, including comparable GDPR concepts where they are useful or where they may apply to particular visitors.

2. Who We Are

Digihuis (Pty) Ltd is the responsible party for the personal information described in this policy.

3. Scope

This policy applies to the current Digihuis website, including:

  • ordinary website visits to digihuis.com
  • the current contact and review-enquiry form
  • current technical security and validation controls used on the site
  • current analytics and tag-management processing where enabled
  • ordinary email correspondence that may follow after you contact Digihuis

This policy does not describe the future AI Growth Snapshot interactive runtime as current processing. If that runtime is deployed later, this policy must be reviewed and updated before public launch.

4. Personal Information We Collect

Information you provide directly

When you use the current Digihuis contact form, Digihuis currently collects:

  • your name
  • your work email address
  • your company name, if you choose to provide it
  • the content of your enquiry or message

Providing information through the contact form is voluntary. However, if you do not provide information marked as required, such as your name, work email address, and enquiry details, Digihuis may not be able to respond to or properly assess your enquiry. Company name is optional.

Technical and website information

When you visit the website, Digihuis and its service providers may process technical information such as:

  • IP address
  • browser and device information
  • operating system or related device environment information
  • page URLs and page paths
  • referring URLs or referral sources
  • timestamps
  • technical request and security information associated with operating the site

Analytics information

Where analytics is enabled, Digihuis may also process:

  • page views
  • event information
  • UTM parameters and campaign source information
  • analytics identifiers or cookie-based measurement identifiers
  • device, browser, and approximate usage information generated through analytics tools

Communications information

If you continue corresponding with Digihuis after an enquiry, Digihuis may also process the contents of those emails and related contact-history information needed to manage the conversation and evaluate the requested services.

5. How We Collect Information

Digihuis collects personal information in a few different ways:

  • directly from you when you complete the current website contact form
  • automatically through ordinary website and server operations when you browse the site
  • through website analytics and tag-management tooling where enabled
  • through ordinary email correspondence after you contact Digihuis

The current contact form also uses a nonce, a honeypot field, and server-side validation to help prevent abuse, spam, and invalid submissions.

6. How and Why We Use Personal Information

Digihuis uses personal information for specific, limited purposes connected to the current website and enquiry process.

  • To respond to enquiries and requested service discussions.
  • To evaluate whether Digihuis can assist with the requested services and to take pre-contractual steps at your request.
  • To communicate with prospects and manage related correspondence.
  • To operate, secure, maintain, and troubleshoot the website.
  • To detect and prevent spam, abuse, and misuse of the contact form or website.
  • To understand website usage, measure acquisition and conversion activity, and improve the website where analytics is enabled.
  • To keep reasonable business records relating to enquiries and communications.
  • To comply with legal obligations and to establish, exercise, or defend legal rights where necessary.

Digihuis does not use your contact-form submission as an automatic sign-up for marketing communications.

7. Processing Grounds and Justification

Under South African privacy law, Digihuis processes personal information where one or more grounds permitted under section 11 of POPIA apply and, where relevant to a particular person or activity, where another applicable legal basis also applies.

  • where you consent and Digihuis relies on that consent
  • where processing is necessary to carry out actions for the conclusion or performance of a contract, including responding to an enquiry and taking steps you request before a possible engagement
  • where processing complies with an obligation imposed by law
  • where processing protects a legitimate interest of the data subject
  • where processing is necessary for pursuing the legitimate interests of Digihuis or a third party to whom the information is supplied, including website security, fraud prevention, record keeping, and managing business enquiries

Digihuis does not treat consent as the basis for every type of processing. Different processing activities may rely on different permitted grounds depending on the context and the law that applies.

8. Cookies and Analytics

The current Digihuis website uses Google Tag Manager and Google Analytics 4 to understand website usage, visitor journeys, traffic sources, and high-level acquisition or conversion performance.

The website uses cookies and similar technologies for different purposes, including:

  • strictly necessary cookies or technical mechanisms used for basic website operation, form handling, security, and abuse prevention
  • analytics cookies or similar measurement technologies used to understand visits, page journeys, traffic sources, and aggregate usage patterns

These analytics tools process technical and usage information such as page visits, page paths, referral information, campaign parameters, browser or device information, and analytics identifiers or cookies used for measurement.

The current website implementation may load analytics tooling before a dedicated analytics-consent control is presented. Digihuis does not describe analytics as consent-gated unless and until that is technically true.

At present, visitor controls may include browser settings that let you restrict, block, or delete cookies. Those browser controls can be useful, but they do not replace any site-level consent controls that Digihuis may be required to provide or later introduce. If Digihuis introduces site-level cookie settings later, the website and this policy should be updated to reflect how visitors can make, review, and withdraw those choices.

Digihuis does not currently make a verified claim that the website responds to browser Do Not Track or Global Privacy Control signals.

9. Sharing Personal Information

Digihuis does not sell personal information.

Digihuis may share personal information only where reasonably necessary to operate the current website, manage enquiries, or comply with law. That may include sharing with categories of service providers such as hosting providers, website platform providers, analytics providers, and email-delivery or mail-routing infrastructure used to send and receive enquiry communications.

Digihuis does not state in this policy that website contact-form submissions are currently sent to HubSpot, Pipedrive, Make, Zapier, the AI Growth Snapshot runtime, or AI providers, because that website processing has not been verified as active.

10. Operators and Service Providers

In POPIA terms, Digihuis is the responsible party for the current processing described in this policy. Some third-party service providers may process information on behalf of Digihuis as operators.

Examples may include providers involved in:

  • website hosting
  • the WordPress application environment
  • tag-management infrastructure
  • analytics services
  • mail delivery or related routing infrastructure

Digihuis expects operators and service providers to process information only to the extent needed to provide their services or to meet legal obligations that apply to them.

11. International Transfers

Some personal information processed through the website may be processed outside South Africa.

This is particularly relevant where international technology providers are used, including Google services such as Google Tag Manager and Google Analytics. Other providers may also use infrastructure, routing, backups, or support operations that involve processing outside South Africa.

Digihuis will transfer personal information outside South Africa only where permitted by applicable law, including section 72 of POPIA. Depending on the circumstances, this may include transfers to a recipient subject to a law, binding corporate rules, or binding agreement that provides an adequate level of protection, transfers made with consent where consent is a lawful basis for the transfer, or transfers otherwise permitted under section 72.

12. Retention

Digihuis keeps personal information only for as long as it is reasonably needed for the purpose for which it was collected, or for longer where a lawful reason requires that retention.

Unsuccessful or inactive enquiries

Inactive or unsuccessful enquiries that do not become client relationships are generally retained for up to 12 months after the last meaningful interaction. After that, Digihuis will delete or de-identify the information where reasonably practicable, unless Digihuis has a lawful reason or legal obligation to retain it for longer.

Client information and business records

If an enquiry becomes a client relationship, Digihuis may retain related information for longer where needed for contractual administration, accounting, taxation, legal obligations, dispute management, and legitimate business record keeping.

Analytics retention

Digihuis does not state a fixed analytics retention period here unless that configuration has been specifically verified.

13. Security

Digihuis takes reasonable technical and organisational steps appropriate to the current website environment to help protect personal information against loss, misuse, unauthorised access, disclosure, alteration, or destruction.

Current measures may include HTTPS where configured on the live site, input sanitisation, server-side validation, anti-spam measures such as nonce and honeypot controls, limited field collection, and access controls appropriate to the systems in use.

No website, internet transmission, or storage system can be guaranteed to be completely secure. For that reason, Digihuis cannot promise absolute security, even though reasonable safeguards are used.

14. Security Incidents

If Digihuis becomes aware of a suspected or actual security compromise affecting personal information, Digihuis will investigate, contain, and respond to the incident in line with the circumstances and applicable law.

Where there are reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, Digihuis will notify the Information Regulator and affected data subjects as required by section 22 of POPIA, subject to any lawful restriction or direction concerning notification.

15. Your Privacy Rights

South African users may have rights under POPIA that include:

  • asking whether Digihuis holds personal information about you
  • requesting access to that information
  • requesting correction, updating, or completion of inaccurate information
  • requesting deletion or destruction where applicable and where there is no lawful basis to continue keeping the information
  • objecting to certain processing where the law allows it
  • withdrawing consent where processing depends on consent
  • objecting to direct marketing
  • lodging a complaint with the Information Regulator

Where privacy laws of another jurisdiction apply to a particular person or processing activity, additional rights may also apply, including rights similar to restriction, portability, erasure, or complaints to a supervisory authority. Digihuis will handle valid requests in accordance with those applicable requirements.

The current contact-enquiry process does not use solely automated decision-making to decide whether an enquiry is accepted or rejected.

16. Exercising Your Rights

To make a privacy request, contact Digihuis at support@digihuis.com.

Digihuis may need to verify your identity before giving access to, correcting, deleting, or otherwise acting on personal information requests. Any verification should be limited to what is reasonably necessary to prevent unauthorised disclosure or misuse of the request process.

17. Direct Marketing

Submitting an enquiry to Digihuis is not consent to direct marketing, and the contact form does not automatically subscribe you to marketing communications.

If Digihuis later carries out unsolicited electronic direct marketing, Digihuis will do so in accordance with section 69 of POPIA and other applicable legal requirements, including consent requirements, any lawful existing-customer circumstances, and applicable opt-out requirements. Where you have the right to object or opt out of direct marketing, Digihuis will respect that right.

18. Children

Digihuis is a B2B service and the current website is not directed at children.

Digihuis does not intentionally seek to collect children's personal information through the current general website enquiry flow. If Digihuis becomes aware that children's personal information was collected improperly, Digihuis will take reasonable steps to review the situation and, where appropriate, delete or otherwise deal with the information in accordance with applicable law.

19. Special or Sensitive Personal Information

The current website does not intentionally request special personal information through the normal contact form.

Please do not include unnecessary sensitive, special, or highly confidential personal information in general enquiry messages unless it is genuinely needed and appropriate for the discussion.

If a visitor nevertheless submits unsolicited special personal information through a free-text field, Digihuis will process it only where lawful and reasonably necessary and may delete it where it is not required for the relevant purpose.

20. Automated Decision-Making

The current contact-enquiry process does not use solely automated decision-making to determine whether an enquiry is accepted, rejected, or responded to.

21. Third-Party Websites

The Digihuis website may link to external websites or services. Those third parties operate under their own privacy practices and policies. Digihuis is not responsible for how those external sites handle personal information once you leave the Digihuis website.

22. Changes to How We Use Information

If Digihuis wants to use personal information for a materially different purpose from the one for which it was collected, Digihuis will assess whether that new use is lawful, compatible with the original purpose, and fair to the individual concerned.

Where required, Digihuis will provide additional notice, seek consent, or take other steps before using information for that materially different purpose.

23. Changes to this Privacy Policy

Digihuis may update this Privacy Policy from time to time to reflect changes in the website, services, service providers, legal obligations, or privacy practices.

Material changes may result in an updated notice and, where required, additional notice or consent. Digihuis does not promise individual email notification for every policy change.

Last updated: 17 August 2026

24. Contacting Digihuis

If you have questions about this Privacy Policy or how Digihuis handles personal information, contact Digihuis at support@digihuis.com or use the contact page.

25. Information Officer

Information Officer enquiries can be directed to info@digihuis.com.

Digihuis uses this email address as the contact channel for Information Officer-related enquiries and associated privacy-compliance requests.

26. Complaints and Regulators

If you believe Digihuis has handled your personal information unlawfully or unfairly, you may contact Digihuis first at support@digihuis.com. You may also have the right to lodge a complaint with a relevant regulator or supervisory authority, depending on the law that applies to your information.

For South Africa, complaints may be lodged with the Information Regulator (South Africa):

Where GDPR genuinely applies to a particular person and processing activity, that person may also have the right to complain to the relevant supervisory authority in the jurisdiction that applies to them.