Privacy policy
Responsible Party: API Frame Consulting (Pty) Ltd, 63 Florida Road, 4001 Durban, South Africa.
Information Officer: Nomsa Dlamini — contact via info@apiframe.digital or +27-31-000-0103.
CIPC registration: 2018/602970/07.
Last updated: 14 October 2026.
1. Purpose of this notice
This policy explains how we process personal information when you use apiframe.digital, in line with the Protection of Personal Information Act 4 of 2013 (POPIA). We process data lawfully, minimally, and only for defined purposes.
2. What we collect
Inquiry form: name, email address, optional phone number, message text, and the page path you submitted from.
Technical delivery: standard server logs may be maintained by your hosting provider; this static site itself does not run analytics or marketing trackers.
Consent preference: a value stored in your browser (localStorage) recording whether you accepted or rejected the cookie notice.
We do not collect special personal information through this site.
3. Purposes and lawful bases
| Purpose | Data | Basis |
|---|---|---|
| Respond to your consulting inquiry | Form fields | Legitimate interest / steps prior to contract |
| Honour your cookie choice | localStorage key apiframe-consent-preference | Consent (POPIA s11(1)(a)) |
| Meet electronic commerce disclosure duties | Business identifiers already public on the site | Legal obligation (ECT Act) |
4. How inquiries are handled
Submissions POST as JSON to /api/inquiry on the same domain. Messages are routed to staff mailboxes for reply. We do not sell inquiry data. Access is limited to personnel who need it to respond or perform agreed consulting work.
5. Retention
Inquiry records are kept for up to 24 months after the last meaningful correspondence, unless a longer period is required for tax or dispute records. Consent preferences remain until you clear site data or change your choice via the footer control.
6. Your rights (POPIA ss11–14, 23–25)
You may request access to personal information we hold about you, ask for correction of inaccurate data, object to processing where applicable, and request deletion when information is no longer necessary. To exercise these rights, email info@apiframe.digital with enough detail for us to locate your record.
7. Security
We use TLS for site delivery and restrict access to inquiry inboxes. No system is perfectly secure; report suspected issues promptly.
8. Cross-border transfers
Hosting may process data outside South Africa depending on infrastructure choices. Where transfers occur, we rely on appropriate safeguards required by POPIA.
9. Complaints
You may lodge a complaint with the Information Regulator (South Africa) if you believe processing infringes POPIA, after giving us a chance to resolve your concern.
10. Changes
Material updates will be posted on this page with a revised date.