Privacy Policy
Effective Date: July 2026
Malobisa IT Solutions ("we", "our", "us") respects your privacy and is committed to protecting your personal information. This policy explains how we collect, use, store, and safeguard your data when you visit our website at malobisait.co.za or use our services.
We are a South African company and comply with the Protection of Personal Information Act (POPIA) as well as applicable international privacy laws.
1. Information We Collect
1.1 Information You Provide to Us
- Contact form submissions: When you fill out our contact form, we collect your name, email address, phone number, service interest selection, and the message you send us.
- Email communications: If you email us directly at info@malobisait.co.za, we receive your email address and any information you include in your message.
1.2 Information Collected Automatically
- IP address: Your IP address is logged when you submit our contact form. This is used for rate limiting (maximum 5 submissions per hour per IP) and for security monitoring to prevent abuse.
- Theme preference: We store your light/dark mode preference in a cookie (
theme) and in your browser's local storage. This preference is retained for one year. - Session data: PHP session cookies are used to maintain your session and store a CSRF security token during form submission.
- reCAPTCHA Enterprise token: When you submit our contact form, Google reCAPTCHA Enterprise processes browser interaction data to generate a risk assessment score. Google acts as a data processor under its own privacy policy. We do not receive or store any reCAPTCHA data beyond the score.
1.3 Information We Do NOT Collect
- We do not collect browsing history, search queries, or page visit logs beyond basic server access logs.
- We do not use third-party analytics tools (e.g., Google Analytics).
- We do not use advertising cookies or tracking pixels.
- We do not collect financial information, payment details, or credit card numbers through this website.
2. How We Use Your Information
| Purpose | Data Used | Legal Basis (POPIA) |
|---|---|---|
| Respond to your inquiry and provide IT services | Name, email, phone, message | Consent — you submitted the form voluntarily |
| Anti-spam and bot prevention | IP address, reCAPTCHA score | Legitimate interest — protecting our systems |
| Rate limiting (anti-abuse) | IP address (hashed) | Legitimate interest — preventing service abuse |
| Remember your theme preference | Theme selection (light/dark) | Consent — set by your interaction with the toggle |
| Security (CSRF protection) | Session identifier | Legitimate interest — preventing cross-site request forgery |
3. Data Storage and Retention
- Contact form submissions are stored in a secure JSON file outside the public web directory. We retain this data for a maximum of 12 months, after which it is permanently deleted.
- Rate-limiting records (hashed IP addresses) are stored as temporary files that auto-expire within 1 hour.
- Theme cookie is stored on your device and expires after 1 year. You can clear it at any time via your browser settings.
- Email correspondence is retained in our email system for as long as necessary to provide ongoing services or as required by law.
4. Sharing of Personal Information
We do not sell, trade, rent, or share your personal information with third parties for their own marketing or commercial purposes.
We may share your information only in the following limited circumstances:
- Service providers: We use Google reCAPTCHA Enterprise for spam prevention. Google processes browser interaction data in accordance with their Privacy Policy. No personal information (name, email, phone, or message content) is sent to Google — only anonymous interaction signals and the site key.
- Legal obligations: We may disclose information if required by law, court order, or government regulation.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity, which will be bound by this same privacy policy.
We never share your name, email address, phone number, or message content with any third party for marketing, advertising, or any other purpose.
5. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- All form submissions are transmitted over HTTPS (TLS encryption).
- Contact form data is stored outside the public web root directory, inaccessible via direct URL.
- CSRF tokens prevent unauthorised form submissions.
- File-level locking prevents data corruption during concurrent submissions.
- Rate limiting prevents abuse and brute-force attacks.
6. Your Rights Under POPIA
As a data subject under South African law, you have the following rights:
- Right to access: Request a copy of the personal data we hold about you.
- Right to correction: Request that we correct any inaccurate or incomplete data.
- Right to deletion: Request that we delete your personal data, subject to legal retention requirements.
- Right to object: Object to the processing of your personal data for legitimate interests.
- Right to withdraw consent: Withdraw your consent at any time (this does not affect the lawfulness of processing before withdrawal).
To exercise any of these rights, contact us at info@malobisait.co.za. We will respond within 30 days as required by POPIA.
7. Cookies and Local Storage
We use the following storage mechanisms on our website:
| Name | Type | Purpose | Duration |
|---|---|---|---|
theme |
Cookie + localStorage | Remembers light/dark mode preference | 1 year |
PHPSESSID |
Session cookie | Maintains session and CSRF token for form security | Session (deleted when browser closes) |
You can manage or delete cookies through your browser settings. Disabling essential cookies may affect the functionality of our contact form.
8. Third-Party Services
The following third-party services are used on this website:
- Google reCAPTCHA Enterprise — Used for spam and bot prevention. Google Privacy Policy
- Google Fonts — Used for typography. Google Privacy Policy
- Font Awesome — Used for icons. Font Awesome Privacy Policy
Each of these services acts as an independent data controller for any data they process. We encourage you to review their privacy policies.
9. International Data Transfers
Your data is primarily stored and processed in South Africa. Where third-party services (such as Google) process data, this may involve transfers to countries that may not have the same data protection laws as South Africa. Google reCAPTCHA Enterprise operates under Google's Data Processing Terms and Standard Contractual Clauses for international transfers.
10. Children's Privacy
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly.
11. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
12. Contact Us
If you have any questions, concerns, or requests regarding this privacy policy or your personal data, please contact us:
- Email: info@malobisait.co.za
- Address: 2265 Extension 16, Lebohang, Leslie, 2265, Mpumalanga, South Africa
You also have the right to lodge a complaint with the Information Regulator of South Africa if you believe we have violated your privacy rights.