Privacy policy

WebOn Digital Solutions (“WebOn”) is the trading name of Ethan Olivier, a sole proprietor. WebOn is not a registered company, so it has no company registration number, and it is not registered for VAT. Ethan Olivier is the responsible party for the personal information described in this policy.

WebOn is a service area business based in Johannesburg, South Africa, so we do not publish a street address.

Our Information Officer is Ethan Olivier. You can reach the Information Officer directly at ethan.olivier@webon.africa or 072 769 7117. There is no privacy department to be routed through.

The website brief. When you fill in our brief at brief.webon.africa (opens in a new tab) so we can prepare a quote and a free homepage preview, we collect:

• your business details, such as its name and what it does;
• your name, email address and phone number;
• your address, if you choose to give it;
• your answers to the questions about your business;
• links to your logo and photos, if you add them;
• which advert or link brought you to the brief, taken from the tags in the web address (called UTM tags) and, if you came from a Facebook or Instagram advert, the click reference Meta adds to it; and
• your consent choices, and when you made them.

The brief saves your answers in your own browser as you go, so you can close it and come back later. Nothing is sent to us until you press send.

The quote form on webon.africa. It asks for your name, your business name, your WhatsApp number or email address, what kind of business it is and what you want the site to do. Your answers stay in the page while you type and are only sent to us when you press send on the last step.

Emails, WhatsApp messages and calls. When you contact us, we keep what you send us: usually your name, your number or email address, your business name and what you tell us about your business and project.

Website visits. Our websites record some technical information when you visit, such as the pages you open and the device you use. Section 6 explains exactly what, and which cookies are involved.

We use your information to:

• prepare a quote and a free homepage preview for you;
• contact you about that quote and preview;
• build and maintain your website, if you become a client;
• measure which adverts bring us enquiries, so we know where our advertising works; and
• keep the business records the law requires.

We process it because you asked us for a quote or a service and we need it to provide that, because you gave your consent on the brief, and because we have a legitimate interest in running and advertising our business. Where we rely on your consent, you can withdraw it at any time. That does not undo anything we did lawfully before.

Giving us your information is voluntary, and no law requires you to supply it. If you do not, the only consequence is that we cannot prepare a quote or preview for you. You can still call, WhatsApp or email us instead.

We only message you on WhatsApp if you ticked the WhatsApp box on the brief, or if you messaged us there first. Tell us to stop at any time and we will.

• We do not sell or rent your personal information to anyone.
• We do not send you direct marketing unless you have agreed to receive it, as section 69 of POPIA requires. Messages about a quote or preview you asked for are not marketing.
• You can opt out of marketing at any time by replying to the message or emailing ethan.olivier@webon.africa.
• We make no automated decisions about you and build no profiles of you.

Cookies are small files a website stores in your browser. Here is every one our websites use, and what it does.

Google Analytics on webon.africa. It tells us how many people visit, which pages they open, how they found us and roughly where in the world they are. It also counts a few actions, such as a quote form being sent, how far people get through that form, and which contact link was pressed. None of this includes anything you typed. It sets cookies named _ga and _ga_ followed by a code for this site, which let Google tell a returning browser from a new one. By default they last up to two years. We have not switched on Google’s advertising or remarketing features, so nothing from webon.africa is used to show you ads.

The Meta Pixel on brief.webon.africa. This is a small piece of code from Meta, the company behind Facebook and Instagram. It tells Meta when someone opens the brief and when a brief is sent, so we can see which of our Facebook and Instagram adverts lead to enquiries. It sets a cookie named _fbp that identifies your browser to Meta, which by default lasts 90 days, and if you arrived from one of our adverts, a cookie named _fbc that records that click. Meta receives the address of the page, the fact that a brief was sent, and technical details such as your IP address and browser. If you are logged in to Facebook or Instagram in the same browser, Meta may be able to link the visit to your account. We have switched off automatic advanced matching, and none of your answers in the brief are sent to Meta. Meta uses this information under its own privacy policy (opens in a new tab). The Pixel is not used on webon.africa.

Your saved brief. The brief keeps your unfinished answers in your browser’s storage, on your device only, so you can pick up where you left off. It is not sent anywhere until you press send, and clearing your browser data removes it.

Error reports. webon.africa uses Sentry to tell us when a page breaks. It sets no cookies, and it is set up to send the technical fault only: not your IP address, not anything you typed, and never a recording of your screen.

You can block or delete cookies in your browser settings, install Google’s Analytics opt out add on (opens in a new tab), or change your ad settings in your Facebook or Instagram account. Both websites, including the brief, work the same without these cookies.

We use a small number of service providers, called operators in POPIA, to run the business. These are all of them:

• Web3Forms delivers the brief you send to our email. It is run by Web3Creative in India, on servers in the United States, and its own policy allows it to keep a copy of a submission for up to three years.
• Resend delivers the quote form on webon.africa to our email. A United States company.
• Vercel hosts both websites and keeps routine server logs, such as IP addresses and the pages requested. Visitors in South Africa are usually served from its Cape Town location, but Vercel is a United States company.
• Google provides our business email through Google Workspace, so your emails and form submissions are stored there, and runs Google Analytics on webon.africa. A United States company that processes data across its global infrastructure.
• Meta runs the Pixel on brief.webon.africa, and WhatsApp, which carries the WhatsApp messages we exchange with you. A United States company.
• Sentry receives error reports from webon.africathat are set up to contain no personal information. Our account is in its European Union region, in Germany.

Sending information outside South Africa. Because most of these providers are based or store data outside South Africa, your information may leave the country. Section 72 of POPIA allows this only in certain cases, and we rely on two of them. First, each provider is bound by terms that require it to protect your information to a standard substantially similar to POPIA. Second, the transfer is needed to deal with what you asked us for, such as a quote or a preview. For providers in the United States and India, that protection comes mainly from these contracts rather than from local law. Sentry is in the European Union, where the General Data Protection Regulation also applies. If you would rather your information did not leave South Africa, phone us instead of using the brief or the form.

If you become a client, we tell you which tools your own project will use before anything is set up.

When we build and run a website for a client, we may process information about that business and its customers on the client’s instructions, as an operator under POPIA. What we may do with it is set by the written agreement for that project. On handover, the client receives the logins, documentation and data, and can take all of it elsewhere.

We keep brief and enquiry information for as long as we need it to quote for you and, if you become a client, to serve you. If we never end up working together, we delete your enquiry no later than 24 months after your last contact with us.

If you ask us to delete your information, we will, and we will also ask Web3Forms to delete its copy of your brief. The exception is anything the law requires us to keep. For example, invoices are kept for at least five years for tax purposes.

Server logs and error reports are deleted automatically on our providers’ own schedules.

Neither website keeps a database of visitors. The information you send us is kept in password protected business accounts and devices, used only by the small team named on our About page. If a breach ever affects your information, we will tell you and the Information Regulator, as POPIA requires.

Under POPIA you have the right to:

• ask what information we hold about you, and get a copy;
• ask us to correct it;
• ask us to delete it, which we will do unless the law requires us to keep it;
• object to us using it, including for direct marketing, and withdraw any consent you gave; and
• complain to the Information Regulator (South Africa) if you believe we have handled your information unlawfully.

To use any of these rights, email ethan.olivier@webon.africa. Formal access requests can also be made under the Promotion of Access to Information Act, as set out in our PAIA manual.

The Information Regulator’s contact details are:

• Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
• Complaints about personal information: POPIAComplaints@inforegulator.org.za
• General enquiries: enquiries@inforegulator.org.za
• Phone: 010 023 5200, or toll free 0800 017 160

We checked these details on the Regulator’s contact page (opens in a new tab) on 28 September 2026.

Our services are for business owners and are not aimed at children. We do not knowingly collect children’s personal information.

If the way we handle personal information changes, we will update this policy before the change takes effect and move the date at the top. We will not quietly weaken a promise made here.