Privacy Policy

Last updated: 12 October 2026.

This policy explains how Webox (Pty) Ltd (“Webox”, “we”, “us”) handles personal information. It applies to this website, our forms, email and WhatsApp. We follow the Protection of Personal Information Act 4 of 2013 (POPIA).

Who we are

Webox is a South African company. Our office is at 3 Stonybrook Road, Brookdale, Phoenix, Durban. Our Information Officer can be reached at support@webox.co.za.

What we collect

We collect only what we need to answer you or to provide a service.

• Contact form. Your name, phone number, email address, the service you choose, and your message.
• Sign-up form. Your name, email address, phone or WhatsApp number, what you need, an optional message, and the service name if you opened sign-up from a service page.
• WhatsApp. The message you send us, including a sign-up message that the site can prefill with your name, email, phone, what you need and your message. WhatsApp also processes your phone number under its own rules.
• Email and phone. Whatever you include when you email or call us.
• Technical data. Our host and analytics tools may see your IP address, browser type, and pages you open. We use this to keep the site working and to understand visits. We do not use it to build a marketing profile of you.

Do not send us identity numbers, card numbers, or other sensitive information in a form or chat. We do not ask for them, and we do not store card numbers.

Why we use it

We use personal information to:

• reply to enquiries and quotes;
• provide domains, hosting, websites, apps, design and social media services you ask for;
• send invoices and keep tax and accounting records;
• protect the site from spam and abuse;
• meet a legal duty.

The lawful reasons are: you asked us to contact you or to perform a contract, we have a legitimate reason to answer and to secure the site, or the law requires us to keep a record. We do not sell personal information. We do not send marketing mail unless you ask for it.

No database on this website

This website has no database of form submissions. When a form is sent, the contents are emailed to Webox. They are not written to a file or database on the website. A hidden field helps us ignore spam. Spam submissions are not emailed and are not stored. To stop the forms being flooded, the site keeps a scrambled (hashed) copy of your IP address and the time you sent a form for up to one hour, then deletes it.

Email

Contact messages go to our support mailbox. Sign-up messages go to the sales and support mailboxes we have set up to receive them. The email shows your address as the reply-to address, so we can answer you. Staff who need the message can read it. Please treat email as a normal business message, not a private vault.

Who else sees it

We share information only as needed:

• Our email and website host carries the site and the mail.
• WhatsApp (Meta) carries WhatsApp chats.
• Google provides Analytics and Tag Manager on this site, and may provide Maps or a Business Profile when we set those up for a client.
• PayFast processes card and EFT payments on a client’s own shop when that client asks us to connect it. Webox forms on this site do not take card payments.
• Domain registries, including the ZA Central Registry (ZACR) for .co.za names, receive the details a registry requires to register a name.
• Banks see payment references when you pay by EFT.
• A professional adviser or regulator if the law requires it, or if we must defend a claim.

Some of these providers store data outside South Africa. We use them to deliver the service you asked for. Their own privacy terms also apply.

Cookies

The site sets a session cookie so the contact and sign-up forms can reject forged submissions. That cookie ends when you close the browser. Google Analytics and Google Tag Manager may set their own cookies to count visits. You can block or delete cookies in your browser. The forms may not work if you block the session cookie.

How long we keep it

We keep email and WhatsApp messages for as long as we need them to handle your request, run the contract, and meet tax and accounting rules. That period is up to five years after our last dealing with you, unless a longer period is required by law or a dispute is still open. After that we delete them or remove your name from them. Hosted client files stay for the life of the hosting service, and for 30 days after it ends, so you can take a copy. We then delete them unless the law tells us to keep them.

Your rights

Under POPIA you may ask us:

• whether we hold personal information about you;
• for a copy of it, and for us to correct or delete it if it is wrong, irrelevant, excessive, or out of date;
• to destroy or delete it if we are no longer allowed to keep it;
• to stop using it for marketing;
• to object to how we use it, or to complain if you think we have used it unlawfully.

Write to support@webox.co.za. We may need proof of identity before we release information. We will respond within a reasonable time. We may refuse a request where the law allows us to, and we will tell you why.

Information Officer

Our Information Officer is contactable at support@webox.co.za, Webox (Pty) Ltd, 3 Stonybrook Road, Brookdale, Phoenix, Durban. Use this address for privacy questions and POPIA requests.

Complaints

You may complain to us first. If you are not satisfied, you may complain to the Information Regulator of South Africa at inforegulator.org.za.

Children

We do not knowingly contract with anyone under 18. Do not send us a child’s personal information.

Changes

We may update this policy by posting a new version on this page with a new “Last updated” date. The new version applies from that date.