Version 1.0 · Effective 15 October 2026

This Privacy Policy explains how Estar Media (Pty) Ltd, trading as Estar Web Design (“Estar”, “we”, “us”), collects, uses and protects personal information, in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who we are

Estar Media (Pty) Ltd, trading as Estar Web Design, Hout Bay, Cape Town, Western Cape.
Email: [email protected] · Phone: 072 130 1949

Our Information Officer is responsible for how we handle personal information and can be contacted at the email address above.

2. Information we collect

• Contact and enquiry details you give us through our contact and quote forms, by email, phone or WhatsApp: your name, business name, email address, phone number and the details of your project.
• Order and billing details when you buy from our online shop or become a client: name, business name, billing address, email, phone number, VAT number and order history.
• Payment information is processed directly by our payment providers (PayFast, Stitch, Peach Payments and PayPal). We do not see or store your full card or bank details.
• Website usage information such as your IP address, browser type and the pages you visit, collected through cookies and server logs.
• Agreement records, such as the date, time, version and IP address when you accept our Website Rental Agreement at checkout.
• Hosted content. If we host your website or email, your content and mailboxes are stored on our servers. We access them only to provide and support the service, or when required by law.

3. How we use your information

• To respond to enquiries and prepare quotes.
• To design, build, host, maintain and support your website, email and other services.
• To process orders, issue invoices and collect payments.
• To send service messages, such as renewal reminders, maintenance notices and security alerts.
• To send occasional news or offers, but only where you have agreed or are an existing client. You can unsubscribe at any time.
• To keep our website and systems secure, and to meet our legal and tax obligations.

4. Who we share it with

We do not sell your personal information. We share it only where needed to provide our services, with:

• hosting and infrastructure providers, and domain registries;
• payment providers, to process your payments;
• software and service providers we use to run our business, such as email, accounting and support tools;
• professional advisers such as our accountant or attorney; and
• authorities, where the law requires it.

These parties may only use your information for the purpose we shared it for. We use AI tools to help with parts of our work, but we do not share passwords, payment details or personal customer data with them.

5. Information sent outside South Africa

Some of our service providers (for example PayPal, Google and email or software providers) may store or process information outside South Africa. Where this happens, we use providers that are bound by data protection laws or agreements that give a level of protection comparable to POPIA.

6. Cookies

Our website uses cookies that are needed for the site and shop to work, such as keeping items in your cart, and cookies that help us understand how visitors use the site. You can block or delete cookies in your browser settings, but parts of the site, such as checkout, may not work without them.

7. How long we keep it

We keep personal information only for as long as we need it for the purposes above. Invoices and financial records are kept for at least five years, as required by South African tax law. Enquiries that do not lead to work are deleted when they are no longer needed.

8. How we protect it

We use reasonable technical and organisational measures to protect personal information, including SSL encryption, secure hosting, access controls, strong passwords and regular backups. If we become aware of a security breach that affects your personal information, we will notify you and the Information Regulator as required by POPIA.

9. Websites we build or host for clients

When we build or host a website for a client, that client is responsible for the personal information collected from their own website visitors and customers. We process it on their behalf, only on their instructions and only to provide our services.

10. Your rights

Under POPIA you have the right to:

• ask what personal information we hold about you, and request a copy;
• ask us to correct or delete your information;
• object to us using your information, including for direct marketing; and
• lodge a complaint with the Information Regulator (inforegulator.org.za).

To make a request, email [email protected]. We may need to confirm your identity before we respond.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the effective date at the top.