WaLu Hub respects your privacy and processes personal information in line with the Protection of Personal Information Act, 2013 (POPIA). If you are in the EU/UK we also honour the mandatory rights the GDPR/UK GDPR give you.
1. Who is responsible for your information
The responsible party (data controller) is:
- Legal status: Sole proprietorship — Warren Jason Petersen, trading as "WaLu Hub".
- Physical address: 29 Annandale Drive, Richwood, Milnerton, Cape Town, Western Cape, 7441, South Africa.
- Information Officer: Warren Jason Petersen, contactable at privacy@waluhub.com.
2. What we collect
| Category | Examples | When |
|---|---|---|
| Identity & contact | name, email, phone, company | when you enquire, create an Account, or buy |
| Account & profile | login credentials (hashed), preferences, portal role | when you use the portal/services |
| Order & billing | items bought, invoices, amounts, payment status | when you transact |
| Payment | handled by PayFast — we receive confirmation and limited transaction detail, not your full card number | at payment |
| Content you submit | messages, files, project/brief information, and anything you send to an AI-assisted service | when you use the Services |
| Technical | IP address, device/browser, pages viewed, cookies | automatically when you visit |
| Support | your correspondence with us | when you contact us |
We collect only what we need for the purposes below. We do not knowingly collect special personal information (e.g. health, biometrics) or children's data through this site; please do not submit it.
3. Why we process it, and our lawful basis
| Purpose | Justification (POPIA s11) |
|---|---|
| Provide the Services, your Account and the portal | performance of our contract with you |
| Take payment and issue invoices/receipts | contract; legal obligation (tax records) |
| Support, security, fraud prevention, service improvement | legitimate interests / our obligations |
| Legal and tax record-keeping | legal obligation |
| Marketing (newsletters, offers) | your consent (opt-in), or the existing-customer exception — you can opt out anytime |
4. Who we share it with (operators / sub-processors)
We share personal information only with service providers who process it on our behalf under a written agreement (operator agreements / data-processing agreements), and with authorities where the law requires.
| Sub-processor | Purpose | Location |
|---|---|---|
| PayFast (Payfast (Pty) Ltd) | payment processing | South Africa |
| Fly.io | application hosting / backend | United States |
| AI service providers | AI-assisted features | may include providers outside South Africa |
| Email delivery provider | transactional & opted-in marketing email | may include providers outside South Africa |
We do not sell your personal information. A current list of our sub-processors is available on request from privacy@waluhub.com.
5. Sending information outside South Africa
Some sub-processors (for example hosting and AI providers) are outside South Africa. We only transfer personal information across borders where POPIA section 72 allows it — i.e. the recipient is bound by an agreement that gives protection substantially similar to POPIA, or the transfer is necessary to perform our contract with you, or you consent.
6. How long we keep it
We keep personal information only as long as we need it for the purposes above, then delete or anonymise it:
- Account & content: for as long as your Account is active, and up to 12 months after closure, unless the law requires longer.
- Financial/tax records: 5 years (as South African tax law requires).
- Marketing consent: until you withdraw it.
7. How we protect it
We use appropriate technical and organisational safeguards (encryption in transit, access controls, hashed credentials, reputable sub-processors). No system is perfectly secure; if a breach affects your information we will notify you and the Information Regulator as POPIA requires.
8. Your rights
You may: access the personal information we hold about you; ask us to correct or delete it; object to certain processing; withdraw consent (including for marketing); and ask about our processing. To exercise a right, contact the Information Officer at privacy@waluhub.com. We may need to verify your identity first.
If you are unhappy with how we handle your information you can complain to the Information Regulator (South Africa) — inforegulator.org.za, complaints: POPIAComplaints@inforegulator.org.za. EU/UK residents may also complain to their local data-protection authority.
9. Cookies and similar technologies
We use cookies and similar technologies to:
- make the site work and remember your session and preferences (essential cookies); and
- understand how the site is used and to measure and improve our marketing (analytics and advertising cookies).
Essential cookies are always on. We ask for your consent to analytics and advertising cookies through the cookie banner shown when you first visit, and you can change your choice at any time using the cookie-preferences control in the site footer, or by adjusting your browser settings. Declining non-essential cookies will not stop you using the core site.
10. Direct marketing
We only send marketing to you if you have opted in, or you are an existing customer and we are offering similar services (POPIA s69). Every marketing message has an unsubscribe link, and we honour opt-outs.
11. Changes
We may update this Policy; we will post the new version with an updated date and, for material changes, tell you.
12. Contact
Information Officer — Warren Jason Petersen · Warren Jason Petersen t/a WaLu Hub · 29 Annandale Drive, Richwood, Milnerton, Cape Town, Western Cape, 7441, South Africa · privacy@waluhub.com