Privacy Policy
Last updated: 27 September 2026
This policy explains what personal information Andritha Online (Pty) Ltd collects, why we collect it, who we share it with, how long we keep it and the rights you have under the Protection of Personal Information Act, 2013 (POPIA). We have written it in plain language. If anything is unclear, ask us.
1. Who we are
Andritha Online (Pty) Ltd (registration number 2026/735468/07) is the responsible party for the personal information described here.
- Address: 25 Hugo Street, Goodwood, Cape Town, 7460, South Africa
- Email: info@andrithaonline.com · Phone and WhatsApp: 079 701 3542
- Information Officer: Andrew Njiokwuemegi (Director), reachable at the same email address
2. What we collect and why
When you browse this website
We run our own analytics. We do not use advertising trackers, and this website does not set cookies. For each visit we record the page you viewed, the site that sent you, your country, whether you are on a phone or a computer, how long the page was open and how far you scrolled. Visits are tied together by a random code kept in your browser tab, which is deleted when you close the tab.
To work out your country, and to show prices in the right currency, our web server sends your IP address to ipwho.is, a location service, and keeps the answer for up to 7 days. We do not store your IP address in our analytics. We use this information to understand which pages help people and to fix what does not. The lawful basis is our legitimate interest in running a working website (POPIA section 11(1)(f)).
When you ask for an instant quote
The quote form asks for your business name, your name, email address and phone number, together with the package you chose and the country you are in. We use this to email you your quote, to contact you about it, and to keep a record of the enquiry in our customer database (HubSpot). We need it to take the steps you asked for before any agreement (section 11(1)(b)).
When you use the contact form
The contact form sends your name, business name, email address, phone number, the type of project and your message to our inbox through FormSubmit (formsubmit.co), a form-delivery service. We use it to reply to you and to follow up on your enquiry.
When you chat with Andi
Andi is an AI assistant. What you type is sent to an AI model run by Cloudflare so that Andi can reply. We do not save chat conversations on our servers: the conversation is kept in your browser tab and disappears when you close it. We record only that a chat was opened and that a message was sent, never what it said. Please do not share sensitive information in the chat. Andi can make mistakes; only a written quote from us is binding.
When you contact us directly
If you email, phone or WhatsApp us, we keep the conversation so that we can help you and have a record of what was agreed. WhatsApp messages are also handled by WhatsApp (Meta) under its own privacy policy. If you phone and we cannot answer, you can leave a voicemail, which our telephone provider records and stores for us.
When you become a client
We keep the details we need to do the work and to invoice you: your business name, contact person, email, phone number, billing address and any registration or VAT number you give us, plus the content you supply for your project (text, logos, photos). The basis is performing our agreement with you (section 11(1)(b)) and complying with tax and company law (section 11(1)(c)).
If we contact your business about our services
We contact businesses we believe could benefit from a new website or software. For this we use business contact details that businesses publish themselves, for example on their own website, in business directories or on their Google Business Profile: the business name, a contact name, a work email address and phone number, the sector and the town. We use these to email or phone the business about our services. Our emails contain a small tracking image that tells us whether an email was opened.
You can ask us to stop at any time: reply to any of our emails asking us to remove you, or email info@andrithaonline.com. We will stop contacting you and add your address to a do-not-contact list, so that you are not contacted again.
3. Who we share it with
We do not sell personal information. We share it only with the service providers that run parts of our business for us (operators, in POPIA's terms), and only what each one needs:
| Provider | What they do for us |
|---|---|
| Hostinger | Hosts this website and our business email inbox |
| Cloudflare | Runs our analytics database, the quote and chat services, the AI model behind Andi, and hosts preview and demo websites |
| HubSpot | Our customer database (enquiries, quotes, clients, prospects) |
| Brevo | Sends our emails, including quotes, and reports whether they were opened |
| Email (Gmail) and document storage (Google Drive). This site also loads its fonts from Google, which means Google receives your IP address when the page loads | |
| FormSubmit | Delivers contact-form messages to our inbox |
| ipwho.is | Looks up the country of an IP address |
| Twilio | Telephone calls and voicemail |
| Zoho | Invoicing, for clients |
| Slack | Internal notifications when a client signs up |
| WhatsApp (Meta) | Only if you choose to message us on WhatsApp |
We may also disclose information where the law requires it, for example to the South African Revenue Service, or to our professional advisers under a duty of confidentiality.
4. Information that leaves South Africa
Several of these providers store or process information outside South Africa, mainly in the European Union, the United Kingdom and the United States. We use them because they are bound by data-protection laws or contract terms that give protection substantially similar to POPIA, or because the transfer is needed to do what you asked of us (POPIA section 72).
5. How long we keep it
- Website analytics: 13 months, then deleted automatically.
- The IP-to-country lookup: up to 7 days.
- Andi chats: not stored by us.
- Enquiries and quotes that do not go ahead: for as long as they are useful for following up, and deleted on request.
- Client records and invoices: for as long as we work together, and afterwards for at least five years, because tax law requires us to keep financial records.
- Business contact details used for our outreach: until you ask us to stop, or until they are no longer useful to us.
- Our do-not-contact list: kept for as long as we do outreach, because it is what keeps us from contacting you again.
6. How we protect it
This website and our services use encrypted connections (HTTPS). Access to our systems is limited to the people who need it and protected by passwords and access keys. If we ever discover that your personal information has been accessed without authorisation, we will tell you and the Information Regulator as POPIA section 22 requires.
7. Your rights
Under POPIA you can:
- ask whether we hold personal information about you, and for a copy of it;
- ask us to correct information that is wrong, or to delete information we no longer have a reason to keep;
- object to us using your information, including for direct marketing, at any time;
- withdraw consent you have given us;
- complain to the Information Regulator.
To make a request, email info@andrithaonline.com with "Privacy request" in the subject line. We may need to confirm who you are before we act on it, and we aim to respond within 30 days. There is no charge for asking us to stop contacting you or to correct your information.
If you are not happy with our answer, you can complain to the Information Regulator (South Africa): Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191 · complaints: POPIAComplaints@inforegulator.org.za · enquiries: enquiries@inforegulator.org.za · 010 023 5200 · inforegulator.org.za.
8. Cookies and browser storage
This website does not set cookies. It keeps four small items in your own browser, none of which are sent to anyone:
| Item | What it is for | How long it lasts |
|---|---|---|
aoSid | A random code that links the pages of one visit for our analytics | Until you close the tab |
andiChat | Your conversation with Andi, so it survives moving between pages | Until you close the tab |
aoQpSeen | Remembers that the quote offer was shown, so it is not shown twice in one visit | Until you close the tab |
aoQpSnooze | Keeps the quote offer hidden after you close it | 7 days |
You can clear these at any time in your browser settings. The website still works without them.
9. Children
Our services are for businesses. This website is not aimed at children, and we do not knowingly collect information about anyone under 18.
10. Changes to this policy
We will update this page when our practices change and show the new date at the top. If a change is significant, we will say so on this page.