1Responsible Party

For personal information processed in connection with its own business operations, Lemon Designs, also known as Lemon Web Designs acts as the responsible party as contemplated by the Protection of Personal Information Act 4 of 2013 (“POPIA”).

2Personal Information We May Collect

• Names, job titles and business/company information.
• Email addresses, telephone numbers and communication details.
• Quotation, billing, invoice and payment-related information.
• Project requirements, specifications, content, feedback and instructions.
• Website, hosting, domain, email, CMS and technical information supplied for service delivery.
• Support messages and communication history sent through email, telephone, WhatsApp or website forms.
• Technical website information such as IP addresses, browser/device information, security logs and cookie-related data where applicable.

3How Information Is Collected

Information may be obtained directly from you, from your organisation, from communications with us, through website forms, from systems you authorise us to access, from public business sources, or automatically through normal website/security technologies.

4Purposes of Processing

• Responding to enquiries and preparing quotations or proposals.
• Entering into and performing service agreements.
• Designing, developing, maintaining or optimising websites and digital systems.
• Providing SEO, AI visibility, support, maintenance and related services.
• Billing, accounting, record keeping and debt administration.
• Protecting systems, preventing fraud, investigating security issues and maintaining logs.
• Managing supplier, hosting, plugin, platform and subcontractor relationships where relevant.
• Complying with legal, tax, regulatory and contractual obligations.
• Sending service-related communications and, where lawful, marketing communications with an available opt-out.

5Lawful Processing

Personal information is processed only where POPIA permits it, which may include consent, performance of a contract, compliance with a legal obligation, protection of a legitimate interest of the data subject, performance of a public-law duty where applicable, or pursuit of a legitimate interest of Lemon Designs, also known as Lemon Web Designs or a third party in circumstances permitted by law.

6Service Providers & Operators

Personal information may be processed by carefully selected service providers or operators where reasonably necessary for service delivery or business administration. These may include hosting companies, cloud platforms, email providers, accounting tools, payment providers, security services, analytics providers, software vendors, contractors and other technical suppliers.

Lemon Designs, also known as Lemon Web Designs does not sell or rent personal information to third parties.

7Cross-Border Processing

Some cloud, email, hosting, analytics, support or software providers may process information outside South Africa. Where personal information is transferred internationally, reasonable steps are taken to ensure the transfer is permitted under POPIA and that appropriate protection is in place.

8Retention

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, to provide services, resolve disputes, maintain appropriate business records or satisfy legal, accounting, tax and regulatory obligations. Information is then deleted, de-identified or securely disposed of where appropriate.

9Security

Reasonable technical and organisational safeguards are used to protect personal information against loss, unauthorised access, misuse, alteration or disclosure. Measures may include access controls, strong passwords, secure hosting, encryption where appropriate, backups, software updates, security monitoring and restricted access.

No website, email system, cloud platform or internet transmission method can be guaranteed to be completely secure.

10Security Compromises

If there are reasonable grounds to believe that personal information has been accessed or acquired by an unauthorised person, Lemon Designs, also known as Lemon Web Designs will handle notification and response obligations in accordance with POPIA and applicable guidance, subject to lawful exceptions.

11Direct Marketing

Electronic direct marketing will be handled in accordance with POPIA and other applicable law. Where consent is required, it will be requested. Recipients may opt out of marketing communications using the method provided in the communication or by contacting us.

12Cookies & Website Technologies

The website may use cookies and similar technologies for essential operation, security, preferences, performance, analytics or integrations. Further information is available in the Cookie Policy.

13Your POPIA Rights

• Ask whether we hold personal information about you and request access where permitted.
• Request correction or updating of inaccurate or incomplete personal information.
• Request deletion or destruction where the legal requirements for deletion are met.
• Object to processing in circumstances allowed by POPIA.
• Withdraw consent where processing is based on consent, without affecting prior lawful processing.
• Object to certain direct marketing.
• Lodge a complaint with the Information Regulator (South Africa).

14Children

This website and the ordinary services of Lemon Designs, also known as Lemon Web Designs are directed at businesses and adult clients, not children. We do not intentionally seek to collect children’s personal information through general marketing activities.

15Information Officer & Requests

Privacy requests may be sent to info@lemondesigns.co.za. We may need to verify your identity before releasing, correcting or deleting personal information.

16Information Regulator

You may contact or lodge a complaint with the Information Regulator (South Africa). Current contact and eServices information is available at inforegulator.org.za.

17Policy Updates

This Privacy Policy may be updated as business processes, technology or legal requirements change. The latest published version applies from the effective date shown above.