Privacy Policy
In accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and, where applicable, the EU General Data Protection Regulation (GDPR).
Last updated: August 2026
About this policy
MTJ Digital is committed to protecting your privacy and personal information. This policy explains what information we collect, why we collect it, how we use it, how we keep it safe, and what your rights are as a data subject. By using our website or engaging our services, you consent to the practices described in this policy.
Responsible party and Information Officer
Trading name
MTJ Digital
Legal form
Sole proprietorship of Max Van Nieuwenhuizen
Information Officer
Max Van Nieuwenhuizen
Phone
+27 61 583 8781Physical address
13 Maroela Road, Dal Fouche, Springs, Gauteng, 1559, South Africa
What personal information we collect
We only collect personal information that is necessary to provide our services or comply with legal obligations.
Contact and enquiry information
- Name and surname
- Email address
- Phone number
- Company name
- Project details, budget range and service interests
Billing and account information
- Invoice and payment records
- Banking details used for refunds (where applicable)
- Client portal account data managed via Invoice Ninja
Website and analytics information
- IP address (anonymised where possible)
- Browser type and device information
- Pages visited and approximate location
- Cookie preferences
Security verification
- hCaptcha response tokens when submitting forms
- Proof-of-work or rate-limiting signals to prevent spam
Why we collect your information
- To respond to enquiries and provide quotes.
- To deliver the website and digital services agreed in the project scope.
- To process invoices, payments and refunds.
- To communicate project updates and support responses.
- To maintain security and prevent fraud or abuse.
- To analyse anonymised website usage and improve our services.
- To comply with legal and accounting obligations under South African law.
Lawful basis for processing
We process personal information on the following lawful grounds:
- Contractual necessity: to deliver the services you requested.
- Legal obligation: to keep tax and accounting records as required by law.
- Legitimate interest: to maintain website security, prevent fraud and analyse anonymised usage.
- Consent: for analytics cookies and any direct marketing communications. You may withdraw consent at any time.
Sharing of personal information
We do not sell, rent or trade your personal information. We only share it with trusted service providers when necessary to deliver our services, and only under appropriate confidentiality and security obligations:
- Web3Forms — for processing contact-form submissions.
- Invoice Ninja — for invoicing, quotes and client portal accounts.
- hCaptcha — for spam and abuse prevention.
- Google LLC — for Google Analytics 4, only when analytics consent is granted.
- Hosting and cloud providers — for storing website data and backups.
- Legal authorities — when required by law, court order or regulatory directive.
International transfers
Some of our service providers process data outside South Africa (for example, Web3Forms, hCaptcha and Invoice Ninja). We only use providers that maintain appropriate data protection measures, and we sign processing agreements or rely on standard contractual clauses where required by POPIA and GDPR.
How long we retain your information
| Type of information | Retention period |
|---|---|
| Project and client records | 5 years after project completion |
| Financial records (invoices, payments) | 7 years (as required by SARS) |
| Enquiry / contact form submissions | 2 years if no project proceeds |
| Marketing contact lists | Until you unsubscribe or withdraw consent |
| Website analytics data (anonymised) | Up to 26 months |
After the applicable period, personal information is securely deleted or anonymised.
How we protect your information
We implement reasonable technical and organisational safeguards, including:
- SSL/TLS encryption for data transmitted via our website.
- Access controls limiting who can view client data.
- Regular backups and secure hosting infrastructure.
- Spam and abuse protection on public forms.
- Regular review of our security practices and service providers.
No method of transmission or storage is 100% secure. In the unlikely event of a breach that poses a risk to your rights, we will notify you and the Information Regulator as required by POPIA.
Your rights as a data subject
Under POPIA and GDPR, you have the right to:
- Access: request a copy of the personal information we hold about you.
- Correction: request that we correct inaccurate or incomplete information.
- Deletion: request deletion, subject to legal retention obligations.
- Object: object to processing for direct marketing.
- Withdraw consent: where processing is based on consent, withdraw it at any time.
- Complain: lodge a complaint with the Information Regulator of South Africa.
To exercise any right, contact us at [email protected] . We will respond within 30 days.
Marketing communications
We may send marketing communications only with your consent or where we have a legitimate interest as an existing client. Every marketing email includes an unsubscribe link, and you can opt out at any time by emailing [email protected] .
Third-party links
Our website may contain links to third-party websites (for example, client portals, social media profiles or partner suppliers). Those sites have their own privacy policies, and we are not responsible for their practices. We encourage you to review their policies before submitting personal information.
Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page with a revised "Last updated" date. Material changes will be communicated to active clients by email where we hold a valid email address.
Complaints and the Information Regulator
If you believe we have not handled your personal information correctly, please contact us first at [email protected] . We will investigate and respond within 30 days.
If you are not satisfied, you may lodge a complaint with the Information Regulator of South Africa:
Email: [email protected]
Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Contact our Information Officer
For privacy queries, access requests, corrections, deletion requests or consent withdrawal:
Name: Max Van Nieuwenhuizen
Email: [email protected]
Phone: +27 61 583 8781
Address: 13 Maroela Road, Dal Fouche, Springs, Gauteng, 1559, South Africa