Enquiries go to the firm. Once your site is live, form
submissions are delivered to an inbox you nominate. They are not stored
in a database of mine and I do not keep copies.
You get a written operator agreement. POPIA section 21
requires one between a responsible party and an operator. It is signed
before the site goes live, not promised afterwards.
Nothing is sold, shared or used for marketing. Not to
me, not to anyone. There are no advertising trackers, no Facebook pixel
and no session-recording tools on these sites unless you ask for them
in writing.
The privacy notice is on the site and written in plain
language. What is collected, why, who sees it, how long it is
kept, and how a person asks for it to be deleted. Your Information
Officer is named on it.
Security is not an add-on. HTTPS everywhere, no
enquiry data sitting in a WordPress database waiting for an unpatched
plugin, and no shared hosting control panel that half the internet has
the login for.
During a demo, before you are a client
If I have sent you a demo site built for your firm, test enquiries you
submit through it come to me, not to you. There is no inbox of
yours wired up yet. Do not put a real client's details through a demo.
Once you are a client, that switches to your inbox and I stop receiving
them.