Privacy Policy

1. Who we are

RoastMySite.co.za (“RoastMySite”, “we”, “us”, or “our”) provides AI-assisted website audit reports for South African businesses and individuals. For the purposes of the Protection of Personal Information Act, 2013 (POPIA), we are the “responsible party” that determines how and why your personal information is processed.

You can reach our Information Officer at support@roastmysite.co.za.

2. Information we collect

We collect only what we need to deliver your roast and run the business:

• Information you give us: your name, email address, and the website URL you submit for auditing.
• Payment information: processed securely by our payment provider, Paystack. We do not receive or store your full card number, CVV, or PIN — Paystack handles that. We retain a payment reference and status to confirm your order.
• The website you submit: we analyse publicly visible content of the URL you provide. We do not access password-protected areas, and we never ask for your website logins.
• Technical information: basic, privacy-respecting analytics (see “Cookies & analytics” below) and standard server logs such as IP address and browser type, used for security and to keep the service running.

3. Why we collect it

• To generate and deliver your audit report to your email address.
• To process your payment and confirm your order.
• To provide customer support and respond to your queries.
• To send you service-related emails about your order (and, only if you opt in, occasional follow-ups).
• To protect, maintain, and improve the security and quality of our service.
• To comply with our legal and regulatory obligations.

4. Our legal basis under POPIA

We process your personal information on the following bases:

• Performance of a contract — to deliver the report you paid for.
• Your consent — for example, when you accept cookies or opt in to marketing emails. You may withdraw consent at any time.
• Legitimate interests — running, securing, and improving our service in a way that does not override your rights.
• Legal obligation — where the law requires us to keep certain records.

5. Who we share it with

We do not sell your personal information. We share it only with trusted operators who help us run the service, and only to the extent needed:

• Paystack — payment processing.
• Brevo (Sendinblue) — sending transactional and report emails.
• Our hosting and infrastructure providers — storing data and running the application.
• Google Analytics 4 (Google LLC) — website traffic and usage statistics. Uses cookies.

We may also disclose information if required by law, court order, or to protect our rights and the safety of others.

6. Cookies & analytics

We use a small number of essential cookies to process your order and remember your preferences (for example, that you have accepted this notice). These are necessary for the site to function.

For analytics we use Google Analytics 4 (provided by Google LLC), which uses cookies and similar technologies to measure how visitors find and use the site — for example pages viewed, device type, and approximate location derived from your IP address (which Google anonymises). We use this only to improve the site and our service; we do not use it for cross-site advertising. You can opt out via your browser settings or Google's opt-out tools.

You can control or delete cookies through your browser settings. Blocking essential cookies may affect checkout.

7. How long we keep it

We keep your personal information only as long as necessary for the purposes above:

• Order and report records: retained for as long as needed to support you and to meet legal/accounting requirements (generally up to 5 years for financial records, as South African law requires).
• Marketing contact details: until you unsubscribe or ask us to delete them.
• Server logs: kept for a short period for security, then deleted or anonymised.

8. How we protect it

We take reasonable, appropriate technical and organisational measures to safeguard your information, including encryption in transit (HTTPS/TLS), restricted access, secure payment handling via Paystack, and hardened infrastructure. No system is perfectly secure, but we work hard to protect your data and will notify you and the Information Regulator if a breach affecting your personal information occurs, as required by POPIA.

9. Your rights under POPIA

You have the right to:

• Ask what personal information we hold about you and request a copy.
• Ask us to correct or update inaccurate information.
• Ask us to delete information we no longer have a lawful reason to keep.
• Object to processing, or withdraw consent, where processing is based on consent.
• Unsubscribe from marketing emails at any time via the link in each email.
• Lodge a complaint with us or with the Information Regulator.

10. Cross-border transfers

Some of our service providers (such as email and analytics) may process data on servers outside South Africa. Where this happens, we take steps to ensure your information receives a level of protection consistent with POPIA.

11. Children

Our service is intended for businesses and adults. We do not knowingly collect personal information from children under 18. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top reflects the latest version. Significant changes will be highlighted on this page.

13. Contact & complaints