how we handle
your data.
plain language. one page. updated when it changes.
who we are
Khwarizmi (Pty) Ltd. Johannesburg, South Africa.
Our information officer can be reached at privacy@khwarizmi.tech.
what we collect
Two things.
- Contact form submissions — your name, email, optional organisation, role, vertical, the surface you selected, and the message you sent.
- Server logs — your IP address and user-agent string, recorded by our hosting provider (Netlify) for security and abuse-prevention purposes.
why and on what basis
We process contact form submissions on the basis of our legitimate interest in responding to engagement inquiries (POPIA s11(1)(f) / GDPR Art 6(1)(f)). If you didn't send us a message, we have nothing about you to process.
Server logs are processed on the same basis — running a website without log access is not a reasonable security posture.
how long we keep it
- Contact submissions: retained for 24 months after the most recent correspondence with you, then deleted.
- Server logs: retained by Netlify for 30 days per their default policy.
who else sees it
Netlify, Inc. processes form submissions and serves this site. Netlify is based in the United States. Cross-border transfers are governed by Standard Contractual Clauses. Nobody else has access to your data.
your rights
You can ask us to:
- tell you what data we hold about you;
- correct anything that is wrong;
- delete what we hold;
- stop processing it;
- object to a particular use.
Email privacy@khwarizmi.tech and we will respond within 30 days.
If you believe we have not handled your data correctly, you can also complain to the South African Information Regulator at inforegulator.org.za or to your local data protection authority.
transfers
Our hosting (Netlify) is based in the United States. POPIA s72 and GDPR Chapter V both permit such transfers when an appropriate safeguard is in place. Netlify provides Standard Contractual Clauses; we rely on those.
search console
We use Google Search Console to monitor how this site appears in search results. Search Console verifies that we own the domain via a meta tag — it sets no cookies and shares no visitor data with Google.
changes
This notice was last updated on 2026-05-20. If we change it materially, we will update the date and bump the version at the top of the page.