Legal · POPIA

Privacy notice.

This notice explains what personal information Lumotala collects, why we collect it, how we protect it, and the rights you have under the Protection of Personal Information Act, 4 of 2013 (POPIA). It is written in plain language on purpose.

VERSION 1.0 · EFFECTIVE 11 JULY 2026 · APPLIES TO LUMOTALA.CO.ZA AND LUMOTALA.COM
We collect the minimum
Only the information you give us in the Founding 20 application form or by contacting us
We never sell your data
Personal information is never sold, rented or traded to anyone
No tracking cookies
This website currently sets no analytics or advertising cookies
Deletion on request
Email privacy@lumotala.co.za and we delete your information, no questions asked

1. Who is responsible for your personal information

Lumotala ("we", "us") is the responsible party for personal information processed through this website, as defined in POPIA. Lumotala is a South African platform currently in its pre-launch phase.

Lumotala's company registration details will be published in this section as soon as incorporation is complete. Until then, the contact address for all privacy matters is privacy@lumotala.co.za.

2. What personal information we collect

We only collect what you actively give us. Through the Founding 20 application form, that is:

  • Your business name
  • Your name (contact person)
  • Your email address
  • Your phone number
  • A description of your current digital setup
  • A description of your biggest digital frustration, and any optional notes you add

If you email or phone us, we also hold the content of that correspondence. We do not collect special personal information (such as health, religious or biometric information), and we do not knowingly collect information about children.

3. Why we collect your information

We use the information in your application for exactly two purposes:

  • To assess your Founding 20 application
  • To contact you about that application and, if you join, about your onboarding

We do not use your application information for marketing lists, and we do not send newsletters unless you separately and explicitly ask for them.

4. Our legal basis for processing is your consent

We process your application information because you consent to it when you tick the consent box on the application form. Providing the information is voluntary, but without it we cannot assess your application. You may withdraw your consent at any time by emailing privacy@lumotala.co.za, and we will stop processing and delete your information.

5. Who sees your information

Your information is seen only by the Lumotala founding team. We never sell, rent or trade personal information.

Like almost every online service, we rely on infrastructure providers (such as our website hosting, DNS and email providers) that may technically store or transmit data as part of delivering their service. Where such a provider processes data outside South Africa, we use providers whose safeguards are consistent with the protection POPIA requires, as section 72 of POPIA provides for.

6. How we protect your information

We apply reasonable technical and organisational safeguards as POPIA requires, including encrypted connections (HTTPS) on this website, access limited to the founding team, and reputable infrastructure providers. No system is perfectly secure, and if a breach ever affects your information we will notify you and the Information Regulator as section 22 of POPIA requires.

7. How long we keep your information

SituationRetention
Your application is unsuccessful or you withdraw itDeleted within 90 days of the decision, unless you ask us to keep it for a future intake
You join LumotalaYour information becomes part of your customer record and is kept for the duration of the relationship plus any period the law requires
You request deletionDeleted without undue delay, unless a law requires us to keep a specific record

8. Your rights under POPIA

You have the right to:

  • Ask what personal information we hold about you, and receive a copy
  • Ask us to correct or update it
  • Ask us to delete it
  • Withdraw your consent at any time
  • Object to processing
  • Complain to the Information Regulator of South Africa

To exercise any of these rights, email privacy@lumotala.co.za. We respond within a reasonable time and never charge for a first request.

9. Cookies: this site currently sets none for tracking

This website currently uses no analytics, advertising or tracking cookies. If we introduce analytics in future, this notice will be updated first and any non-essential cookies will ask for your consent before they are set.

10. How to contact us or complain

For any privacy question, request or complaint, email privacy@lumotala.co.za. We would genuinely rather fix a problem than have you escalate it, but you always have the right to lodge a complaint with the Information Regulator of South Africa, whose details are published at inforegulator.org.za.

11. Changes to this notice

If we change this notice, the new version is published on this page with a new version number and effective date. If a change materially affects how we use information you have already given us, we will tell you by email before it takes effect.

Privacy questions

Questions people ask about privacy at Lumotala.

What personal information does Lumotala collect?

Only what you actively give us: your business name, your name, email address, phone number, and your descriptions of your digital setup and frustrations, submitted through the Founding 20 application form or by contacting us directly.

Does Lumotala sell personal information?

No. Lumotala never sells, rents or trades personal information to anyone.

Is Lumotala POPIA compliant?

Yes. POPIA compliance is a design requirement at Lumotala. This notice, the consent step on the application form, and the deletion process all exist to meet POPIA obligations.

How do I get my information deleted?

Email privacy@lumotala.co.za and ask. We delete without undue delay, unless a specific law requires us to keep a particular record, in which case we tell you which one.

Does the Lumotala website use tracking cookies?

No. The website currently sets no analytics, advertising or tracking cookies. If that ever changes, this notice is updated first and non-essential cookies will ask for consent.

Who can see my Founding 20 application?

Only the Lumotala founding team. Applications are not shared with third parties for marketing or any other purpose.

How long does Lumotala keep unsuccessful applications?

Unsuccessful or withdrawn applications are deleted within 90 days of the decision, unless you ask us to keep yours for a future intake.

Can I withdraw my consent after applying?

Yes, at any time, by emailing privacy@lumotala.co.za. We then stop processing your information and delete it.

Where do I complain if I am unhappy with how my data was handled?

First, email privacy@lumotala.co.za so we can fix it. You also always have the right to complain to the Information Regulator of South Africa, whose details are at inforegulator.org.za.

Is my information stored in South Africa?

Lumotala uses reputable infrastructure providers for hosting, DNS and email, and some of them may process data outside South Africa. Where that happens, we use providers whose safeguards are consistent with POPIA, as section 72 provides for.