Privacy notice.
This notice explains what personal information Lumotala collects, why we collect it, how we protect it, and the rights you have under the Protection of Personal Information Act, 4 of 2013 (POPIA). It is written in plain language on purpose.
1. Who is responsible for your personal information
LUMOTALA (PTY) LTD, registration number 2026/553248/07, a private company registered in the Republic of South Africa on 14 July 2026, is the responsible party for personal information processed through this website, as defined in POPIA. Lumotala is currently in its pre-launch phase.
2. What personal information we collect
We only collect what you actively give us. Through the Founding 20 application form, that is:
- Your business name
- Your name (contact person)
- Your email address
- Your phone number
- A description of your current digital setup
- A description of your biggest digital frustration, and any optional notes you add
If you email or phone us, we also hold the content of that correspondence. We do not collect special personal information (such as health, religious or biometric information), and we do not knowingly collect information about children.
3. Why we collect your information
We use the information in your application for exactly two purposes:
- To assess your Founding 20 application
- To contact you about that application and, if you join, about your onboarding
We do not use your application information for marketing lists, and we do not send newsletters unless you separately and explicitly ask for them.
4. Our legal basis for processing is your consent
We process your application information because you consent to it when you tick the consent box on the application form. Providing the information is voluntary, but without it we cannot assess your application. You may withdraw your consent at any time by emailing privacy@lumotala.co.za, and we will stop processing and delete your information.
5. Who sees your information
Your information is seen only by the Lumotala founding team. We never sell, rent or trade personal information.
Like almost every online service, we rely on infrastructure providers (such as our website hosting, DNS and email providers) that may technically store or transmit data as part of delivering their service. Where such a provider processes data outside South Africa, we use providers whose safeguards are consistent with the protection POPIA requires, as section 72 of POPIA provides for.
6. How we protect your information
We apply reasonable technical and organisational safeguards as POPIA requires, including encrypted connections (HTTPS) on this website, access limited to the founding team, and reputable infrastructure providers. No system is perfectly secure, and if a breach ever affects your information we will notify you and the Information Regulator as section 22 of POPIA requires.
7. How long we keep your information
| Situation | Retention |
|---|---|
| Your application is unsuccessful or you withdraw it | Deleted within 90 days of the decision, unless you ask us to keep it for a future intake |
| You join Lumotala | Your information becomes part of your customer record and is kept for the duration of the relationship plus any period the law requires |
| You request deletion | Deleted without undue delay, unless a law requires us to keep a specific record |
8. Your rights under POPIA
You have the right to:
- Ask what personal information we hold about you, and receive a copy
- Ask us to correct or update it
- Ask us to delete it
- Withdraw your consent at any time
- Object to processing
- Complain to the Information Regulator of South Africa
To exercise any of these rights, email privacy@lumotala.co.za. We respond within a reasonable time and never charge for a first request.
9. Cookies: this site currently sets none for tracking
This website uses Cloudflare Web Analytics to count page views. It sets no cookies, it stores nothing on your device, and it cannot follow you to other websites. There is no cookie banner here because there are no cookies to consent to. Cloudflare processes a page view without building a profile of you, and we see totals, not people. We use no advertising or tracking cookies. This notice was updated before analytics was switched on, as the previous version of this section promised. If we ever introduce anything that does set a non-essential cookie, this notice will again be updated first and your consent will be asked before it is set.
10. How to contact us or complain
For any privacy question, request or complaint, email privacy@lumotala.co.za. We would genuinely rather fix a problem than have you escalate it, but you always have the right to lodge a complaint with the Information Regulator of South Africa, whose details are published at inforegulator.org.za.
11. Changes to this notice
If we change this notice, the new version is published on this page with a new version number and effective date. If a change materially affects how we use information you have already given us, we will tell you by email before it takes effect.
Questions people ask about privacy at Lumotala.
What personal information does Lumotala collect?
Only what you actively give us: your business name, your name, email address, phone number, and your descriptions of your digital setup and frustrations, submitted through the Founding 20 application form or by contacting us directly.
Does Lumotala sell personal information?
No. Lumotala never sells, rents or trades personal information to anyone.
Is Lumotala POPIA compliant?
Yes. POPIA compliance is a design requirement at Lumotala. This notice, the consent step on the application form, and the deletion process all exist to meet POPIA obligations.
How do I get my information deleted?
Email privacy@lumotala.co.za and ask. We delete without undue delay, unless a specific law requires us to keep a particular record, in which case we tell you which one.
Does the Lumotala website use tracking cookies?
No. The website currently sets no analytics, advertising or tracking cookies. If that ever changes, this notice is updated first and non-essential cookies will ask for consent.
Who can see my Founding 20 application?
Only the Lumotala founding team. Applications are not shared with third parties for marketing or any other purpose.
How long does Lumotala keep unsuccessful applications?
Unsuccessful or withdrawn applications are deleted within 90 days of the decision, unless you ask us to keep yours for a future intake.
Can I withdraw my consent after applying?
Yes, at any time, by emailing privacy@lumotala.co.za. We then stop processing your information and delete it.
Where do I complain if I am unhappy with how my data was handled?
First, email privacy@lumotala.co.za so we can fix it. You also always have the right to complain to the Information Regulator of South Africa, whose details are at inforegulator.org.za.
Is my information stored in South Africa?
Lumotala uses reputable infrastructure providers for hosting, DNS and email, and some of them may process data outside South Africa. Where that happens, we use providers whose safeguards are consistent with POPIA, as section 72 provides for.