Privacy Policy

Who is responsible

Just1 is operated by Maxiware CC (registration 2000/048244/23), the responsible party for the personal information described here. Honorio De Sousa is the Information Officer.

Business address: 3 Balcairn Complex, Unit 3, 277 Main Road, Bryanston, 2191
Email: [email protected]
Phone: +27 68 640 5605

What we collect and why

• Name, email address and WhatsApp number: to process payment, contact you about the order, send receipts, collect your website details, deliver the work and provide support.
• Business details, website content, messages, photos and files: to build and deliver your website.
• Order and transaction details: to run checkout, confirm payment, fulfil your order, handle refunds or disputes, and keep legally required records. PayFast handles your card details; we do not receive your full card number.
• Technical and security data: limited request, browser, device, IP address and timestamp information used to keep the service secure, reliable and resistant to abuse.
• Advertising information: only if you allow advertising tracking, we use cookies and similar identifiers and may share visit, device, campaign and purchase information with Meta to measure ads and improve campaigns.

What is required

Your name, email address and WhatsApp number are required to place an order. If you do not provide them, we cannot process the order or deliver your website. Business content is voluntary until you order, but we cannot complete the website without the information and materials needed for the design. Advertising tracking is optional. Saying no does not stop you from using the site or buying.

Who receives information

We do not sell personal information. We share only what is needed with:

• PayFast for secure payment processing;
• Billy for checkout, order and billing workflow;
• Mailgun by Sinch for transactional email;
• Meta and WhatsApp for customer messages and, only with your advertising consent, ad measurement;
• Hetzner, Laravel Forge and Cloudflare for hosting, server management, security and delivery; and
• professional advisers, regulators or law-enforcement bodies when legally required.

Processing outside South Africa

Some providers operate global infrastructure or support teams, so information may be processed outside South Africa, including in Europe and the United States. We use providers whose terms include data-protection and security commitments and rely on contracts or other safeguards intended to provide protection comparable to POPIA where cross-border processing occurs.

How long we keep it

• Unpaid enquiries and abandoned leads: up to 12 months.
• Advertising identifiers and routine technical request data: up to 90 days.
• Detailed webhook payloads: removed or stripped of personal information after 90 days.
• Advertising consent records: up to two years after your choice.
• Paid customer and transaction records: normally five years, or longer where a legal claim, tax rule or contractual obligation requires it.

Your rights

You may ask for access to your personal information, correction of inaccurate information, deletion where we no longer need it, or object to particular processing. You may withdraw advertising consent at any time without affecting your order. Contact [email protected] or phone +27 68 640 5605. We may need to verify your identity before acting on a request. Formal record requests are explained in our PAIA Manual.

Complaints

Please contact us first so we can try to fix the issue. You may also complain to the Information Regulator (South Africa) at [email protected], JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001, or through the Regulator's complaints page.

Security and updates

We use reasonable technical and organisational safeguards, restrict access, and require service providers to protect information. We will update this policy when our processing or providers materially change and will ask for a new advertising choice when the consent purpose or provider list changes materially.