Privacy notice
Version 1.0 · Effective 28 September 2026
About this notice
This notice explains how CreatingwithOra (Pty) Ltd ("CWO", "we", "us") collects, uses and protects personal information when you use this website, contact us or work with us. We follow the Protection of Personal Information Act, 2013 (POPIA). POPIA also protects information about businesses, so this notice covers information about your business too.
1. Who we are
| Business | CreatingwithOra (Pty) Ltd, registration number 2026/751196/07 |
|---|---|
| Address | 589 Sobuza Street, Tembisa, Johannesburg, Gauteng, 1632 |
| creatingwithora@gmail.com | |
| Phone and WhatsApp | 063 775 5934 |
| Information Officer | Oratile Ramango, at creatingwithora@gmail.com |
We are the "responsible party" for your information. That means we decide how it is used and we are accountable for protecting it.
2. What we collect
| Information | When we collect it, and whether you have to give it |
|---|---|
| Your business name and your answers about your project (type of business, what you need, features, timeline) | When you use Start a project. We need these to reply properly, so the form can't be sent without them. |
| A phone number or email address | Optional on the Start a project summary. If you leave it out, we reply on the WhatsApp number or email address you send from. |
| Your WhatsApp name and number or your email address, and what you write to us | When you send us your brief or message us on WhatsApp, by email, by phone or on social media. We need it to reply. |
| Questions typed into Ask CWO | Only when Ask CWO can't find an answer. We save the question text on its own, with no name, number or other identifier attached. See section 5. |
| A scrambled (hashed) version of your IP address | When you send the form or ask a question, so we can limit spam. It is not used for anything else. |
| Anonymous usage information (pages visited, the site you came from, country, device type) | When you browse the site, through Vercel Web Analytics. It uses no cookies and doesn't identify you. |
| If you become a client: the contact details of the people we work with, billing details, and the content and access you give us for your project | During the project. We need it to do the work, invoice and keep proper records. |
We collect information directly from you. We don't buy personal information or contact lists from anyone.
3. Why we use it
| Purpose | Our reason under POPIA |
|---|---|
| Replying to your enquiry and preparing a quote | You asked us to, and it is in our legitimate interest to reply |
| Keeping track of enquiries in our private admin portal and following up about your project | Our legitimate interest in managing enquiries properly |
| Delivering your project, invoicing and support | Needed to carry out our agreement with you |
| Improving our FAQ from questions Ask CWO couldn't answer | Our legitimate interest in answering common questions |
| Counting visits in anonymous totals | Our legitimate interest in improving the website. No cookies, no profiles |
| Keeping the website secure and stopping spam | Our legitimate interest in protecting you and us |
| Tax, accounting and other legal duties | Required by law |
We don't sell your information, and we won't use it for a purpose unrelated to these without telling you first.
4. Start a project, WhatsApp and email
When you send your brief, we save a copy in our admin portal and get an email alert, then your WhatsApp or email app opens with the brief filled in. Your message then travels through WhatsApp (Meta) or your email provider to us, and their own privacy terms apply to it. Sending a brief doesn't commit you to anything.
5. Ask CWO
Ask CWO answers from our FAQ. When it can't find an answer, we save the question so we can add a better answer later. Please leave personal details out of your questions. For anything about you or your business, message us on WhatsApp or email instead.
6. Marketing
We don't send newsletters or marketing messages. Replying to your enquiry is not marketing. If we start a newsletter, we will only add you if you opt in, and every message will say who it is from and give you an easy way to unsubscribe.
8. Who we share it with
We share information only with service providers that help us run the business, and only what they need:
| Provider | What they do |
|---|---|
| Vercel | Hosts the website and keeps short-lived security logs |
| Supabase | Stores enquiries, unanswered questions and site content in our database, and runs the admin login |
| Resend | Sends us an email alert when a new enquiry arrives |
| WhatsApp (Meta) and Google (Gmail) | Where your WhatsApp messages and emails reach us |
If you become a client, we may share project information with services your project needs (for example a domain registrar or payment gateway), with your knowledge. We may also disclose information where the law requires it, or to protect someone's safety or our legal rights.
9. Information stored outside South Africa
Our website and database run in Ireland, in the European Union, where data protection law gives protection at least similar to POPIA. Resend, WhatsApp and Google may process information in the United States and other countries. Vercel, Supabase and Resend process it for us under data processing terms that require them to protect it. We only transfer information outside South Africa where POPIA allows it.
10. How we protect it
We use encrypted connections (HTTPS), database rules that stop the public from reading enquiries, and an admin portal that only authorised CWO accounts can open. No system is perfectly secure, but if a breach affects your information, we will tell you and the Information Regulator as POPIA requires.
11. How long we keep it
| Information | How long |
|---|---|
| Enquiries and messages that don't become projects | 12 months after you contact us |
| Client records (agreements, invoices, project correspondence) | 5 years after the project ends, for tax and legal records |
| Unanswered Ask CWO questions | 12 months after the question was last asked |
| Hashed IP addresses used to limit spam | 30 days at most |
| Anonymous visit counts | Kept as anonymous totals |
After that we delete the information or make it anonymous.
12. Your rights
Under POPIA you can:
- ask whether we hold information about you, and for a copy of it,
- ask us to correct or delete it,
- object to us using it, including for marketing, at any time,
- withdraw any consent you gave,
- complain to the Information Regulator.
Email creatingwithora@gmail.com. We will respond within a reasonable time and may need to confirm who you are first. You can find the Information Regulator's complaint process and contact details at inforegulator.org.za.
13. Children
Our services are for businesses and organisations. We don't knowingly collect information from anyone under 18. If we find we have, we will delete it.
14. Changes to this notice
We update this notice when our practices change. The version and date at the top show when it last changed. See also our terms of use.
15. Contact
Questions about your information? Contact our Information Officer, Oratile Ramango, at creatingwithora@gmail.com or 063 775 5934.