Privacy policy
Last updated 12 October 2026. This policy explains what personal information Kirosconsult (kirosconsult.co.za) collects, why, who sees it and what your rights are. It is written to meet the Protection of Personal Information Act 4 of 2013 (POPIA).
Who we are
Kirosconsult builds websites and apps and runs digital marketing for businesses. We are based in Durban, KwaZulu-Natal, South Africa. Our information officer can be reached at info@kirosconsult.co.za.
What we collect
- Enquiries. When you use the contact form we receive your name, business name, email address, optional phone number, the plan you picked and your message.
- Projects and billing. If you become a client we keep what we need to do the work and invoice you: contact details, business details, the content you give us and payment records.
- Payments. Card and bank details are entered on our payment provider's own page (Stitch or your bank). We do not see or store them.
- Server logs. Our hosting provider keeps standard logs (IP address, browser type, pages requested, time) for security and fault-finding.
- What we do not collect. This website has no analytics, advertising or tracking scripts and sets no cookies (see the cookies page).
Why we use it
- To answer your enquiry and give you a quote.
- To do the work and bill for it (a contract with you).
- To keep the site and your account secure, and to stop spam (our legitimate interests).
- To meet legal duties such as tax and accounting records.
- We only send marketing email if you have asked us to. We do not sell or rent your details.
Who we share it with
Only the people who help us run the service, under their own privacy terms: our hosting and email providers, our payment provider, and accountants or professional advisers where needed. We may disclose information if the law requires it.
Where it is processed
Our systems and hosting providers may store data in South Africa, the United Kingdom or the European Union. Where we send personal information across a border we make sure it is protected to a comparable standard.
How long we keep it
Enquiries that do not become projects are kept for up to 24 months and then deleted. Client and billing records are kept for as long as the law requires for tax and accounting purposes (usually five to seven years). Server logs are kept for a short period set by our host.
Security
We use HTTPS, protected logins, up-to-date software and limited access. No system is perfectly secure, and if a breach affects your information we will tell you and the regulator where the law requires.
Your rights
- See what we hold about you and ask us to correct or delete it.
- Object to our processing or withdraw consent where we rely on it.
- Complain to the Information Regulator.
To use any of these rights, email info@kirosconsult.co.za. If you are not satisfied you can complain to the Information Regulator (South Africa), at inforeg.org.za.
Children
Our services are for businesses. We do not knowingly collect information from children.
Changes
If we change this policy we will update the date at the top. Material changes will be flagged on the site.