how we handle
your data.

who we are

Khwarizmi (Pty) Ltd (registration 2025/064405/07). Johannesburg, South Africa. Registered with the Information Regulator (registration 2026-021590).

Our information officer is Ridhwaan Mayet, reachable at ridhwaan@ridhwaan.xyz.

what we collect

Two things.

• Contact form submissions — your name, email, optional organisation, role, vertical, the surface you selected, and the message you sent.
• Server logs — your IP address and user-agent string, recorded by our hosting provider (Netlify) for security and abuse-prevention purposes.

why and on what basis

We process contact form submissions on the basis of our legitimate interest in responding to engagement inquiries (POPIA s11(1)(f) / GDPR Art 6(1)(f)). If you didn't send us a message, we have nothing about you to process.

Server logs are processed on the same basis — running a website without log access is not a reasonable security posture.

how long we keep it

• Contact submissions: retained for 24 months after the most recent correspondence with you, then deleted.
• Server logs: retained by Netlify for 30 days per their default policy.

who else sees it

Netlify, Inc. processes form submissions and serves this site. Netlify is based in the United States. Cross-border transfers are governed by Standard Contractual Clauses. Nobody else has access to your data.

transfers

Our hosting (Netlify) is based in the United States. POPIA s72 and GDPR Chapter V both permit such transfers when an appropriate safeguard is in place. Netlify provides Standard Contractual Clauses; we rely on those.

cookies

We set none. There is no banner to dismiss.

~ that part of the internet, we are choosing to skip ~

search console

We use Google Search Console to monitor how this site appears in search results. Search Console verifies that we own the domain via a meta tag — it sets no cookies and shares no visitor data with Google.

what this covers

This part applies to every survey, poll or questionnaire run by Khwarizmi (Pty) Ltd — the one you may be filling in now, and any we run in future — unless a particular survey links to a different notice.

what we collect from surveys

It depends on the survey, but it is always limited to what that survey asks for. Typically:

• Your answers — usually about your business or your work, not about you as a person.
• A website address — only if the survey asks for one.
• A contact detail — an email or similar, and only if you choose to give it so we can send you an individual result.

We do not ask for special personal information — health, biometrics, race, religion, political views or sexual orientation — and we ask that you do not include any of it in your answers.

the website check

Some surveys ask for your website address. If you give one, we may run a single automated check on that public address using standard tools such as Google PageSpeed Insights and BuiltWith. This looks only at your public website. It does not access anything private, and the check is run against the address alone — it is not tied to your email.

why and on what basis (surveys)

We process survey responses on the basis of your consent (POPIA s11(1)(a)). Taking part is voluntary, you may skip any question, and you may withdraw at any time. If you do not submit a response, we have nothing about you to process.

can this identify you

An email address or phone number identifies you on its own, and a website address often does too. So any response that includes one of these is treated as identifiable and kept private. You are welcome to take part without giving an email — you simply will not receive an individual result back.

who else sees survey responses

We collect responses using Google Forms and store them in Google Sheets. Google LLC is based in the United States; cross-border transfers are governed by Standard Contractual Clauses. Your individual response stays private to us. We publish only anonymised, aggregated findings — never your individual answers, your email or your domain in a way that identifies you.

how long we keep survey data

• Identifiable responses — anything tied to an email or a domain that identifies a person — are deleted within 90 days of publishing that survey's aggregate findings.
• Anonymised, aggregated data may be kept indefinitely for research and reference.

how we keep it safe

Survey responses live in a Google account we control, protected with two-factor authentication. Response sheets are not shared publicly or by open link, access is limited to us, and we do not copy identifiable responses onto unsecured devices or paste them into third-party tools.

children

Our surveys are intended for businesses and adults. They are not directed at children, and we do not knowingly collect the personal information of children.

your rights

You can ask us to:

• tell you what data we hold about you;
• correct anything that is wrong;
• delete what we hold;
• stop processing it;
• object to a particular use.

Email ridhwaan@ridhwaan.xyz — for survey-related requests, include the email or domain you used — and we will respond within 30 days.

If you believe we have not handled your data correctly, you can also complain to the South African Information Regulator at inforegulator.org.za or to your local data protection authority.

changes

This notice was last updated on 2026-05-31. If we change it materially, we will update the date and bump the version at the top of the page.