Horizon Labs Logo

Privacy Policy

Last updated: 27 March 2026

Horizon Labs (Pty) Ltd ("Horizon Labs", "we", "us", or "our") is committed to protecting the personal information of our clients, website visitors, and all other individuals we interact with. This Privacy Policy explains how we collect, use, store, share, and protect your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and any other applicable South African data protection legislation.

We take your privacy seriously. If you have questions about this policy or how we handle your personal information, please contact our Information Officer (see Section 13).

1. Who We Are

Horizon Labs (Pty) Ltd is a digital agency based in Johannesburg, South Africa, providing web development, digital marketing, SEO, social media management, and related services to South African businesses.

  • Website: horizonlabs.co.za
  • Email: hello@horizonlabs.co.za
  • Phone/WhatsApp: +27 68 373 5905

We act as the Responsible Party (as defined in POPIA) in respect of the personal information we collect and process.

2. Scope of This Policy

This policy applies to:

  • Visitors to our website (horizonlabs.co.za)
  • Prospective clients who make enquiries
  • Current and past clients
  • Suppliers, contractors, and service providers
  • Job applicants and prospective employees
  • Anyone whose personal information we receive in the course of our business

3. What Personal Information We Collect

We may collect the following categories of personal information:

3.1 Contact and Identity Information

  • Full name
  • Email address
  • Phone number (including WhatsApp number)
  • Business name and registration details
  • Physical or postal address

3.2 Financial Information

  • Invoice and payment records
  • Bank account or card details (processed via secure third-party payment processors — we do not store full card details)
  • Billing address

3.3 Technical and Usage Information

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited, time spent, and navigation patterns
  • Referring URLs
  • Cookie identifiers (see Section 9)

3.4 Communications

  • Emails, WhatsApp messages, and other correspondence with us
  • Enquiry form submissions
  • Support requests

3.5 Project-Related Information

  • Content, images, text, and materials you supply for us to build or maintain your website
  • Login credentials for third-party platforms you share with us for project delivery

We do not intentionally collect special personal information (as defined in POPIA — e.g., race, religion, health information, sexual orientation, criminal records) unless you voluntarily provide it or it is strictly necessary for a specific service.

4. How We Collect Personal Information

We collect personal information:

  • Directly from you — when you complete our contact or enquiry forms, email us, message us on WhatsApp, sign a service agreement, or apply for a job.
  • Automatically — through cookies and analytics tools when you visit our website (see Section 9).
  • From third parties — such as business registration databases, referrals from existing clients, or publicly available information, where permitted by law.

5. Lawful Basis for Processing

We process personal information only where we have a lawful basis under POPIA:

PurposeLawful Basis
Delivering contracted servicesContract
Invoicing and paymentsContract / Legal obligation
Responding to enquiriesLegitimate interest / Consent
Improving our websiteLegitimate interest
Marketing communicationsConsent
Tax and legal complianceLegal obligation
Processing job applicationsConsent / Legitimate interest
Website analyticsLegitimate interest / Consent

Where we rely on your consent, you have the right to withdraw it at any time (see Section 10).

6. How We Use Your Personal Information

  1. Delivering our services — building and maintaining websites, running marketing campaigns, providing technical support.
  2. Client communication — responding to enquiries, sending project updates, providing invoices.
  3. Business administration — record-keeping, accounting, tax compliance.
  4. Marketing — newsletters and updates about new services (only with your consent; you can opt out at any time).
  5. Improving our website — analysing usage data to fix errors and improve user experience.
  6. Legal compliance — meeting our obligations under South African law, including POPIA and tax legislation.
  7. Security — detecting and preventing fraud, abuse, or unauthorised access.
  8. Recruitment — evaluating job applications and communicating with candidates.

7. Sharing of Personal Information

We do not sell your personal information. We may share it with:

7.1 Service Providers (Operators)

We engage trusted third-party service providers including website hosting providers, email platforms, analytics tools, accounting software, and payment processors. These providers act as Operators under POPIA and are contractually required to process personal information only on our instructions.

7.2 Legal and Regulatory Authorities

We may disclose personal information if required to do so by law, a court order, or a regulatory authority (e.g., SARS, the Information Regulator).

7.3 Business Transfers

If Horizon Labs undergoes a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected individuals as required by law.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience and to analyse website traffic.

TypePurposeCan Be Disabled?
EssentialRequired for the website to functionNo
AnalyticsUnderstanding how visitors use our siteYes
MarketingTracking effectiveness of advertisingYes
PreferenceRemembering your preferencesYes

When you first visit our website, you will be presented with a cookie consent banner. You may accept all cookies, reject non-essential cookies, or customise your preferences.

9. Your Rights as a Data Subject

Under POPIA, you have the following rights:

RightDescription
Right to be notifiedYou have the right to know that we are collecting your personal information and why.
Right of accessYou may request a copy of the personal information we hold about you.
Right to correctionYou may request that we correct inaccurate, incomplete, or outdated personal information.
Right to deletionYou may request that we delete your personal information, subject to legal exceptions.
Right to objectYou may object to the processing of your personal information, particularly for direct marketing.
Right to withdraw consentWhere we process based on consent, you may withdraw it at any time.
Right to complainYou may lodge a complaint with the Information Regulator of South Africa.

Submit a written request to our Information Officer at hello@horizonlabs.co.za with the subject line "POPIA Data Subject Request". We will respond within 30 days.

10. Retention Periods

CategoryRetention Period
Client contract and project records5 years after end of relationship
Financial and accounting records5 years (Companies Act and SARS)
Marketing communications recordsUntil opt-out, plus 1 year
Website analytics data26 months
Job application records (unsuccessful)1 year after process concludes
General correspondence2 years from last contact

After the applicable retention period, personal information is securely deleted or anonymised.

11. Cross-Border Transfers

Horizon Labs operates primarily in South Africa. However, some of our service providers are located outside South Africa (e.g., United States — Google Workspace, Google Analytics, cloud hosting providers), which means your personal information may be transferred internationally.

Where we transfer personal information outside South Africa, we ensure that appropriate safeguards are in place, as required by POPIA Section 72. These safeguards include ensuring the recipient country provides adequate protection, binding contractual arrangements, or obtaining your consent.

12. Information Officer

As required by POPIA, Horizon Labs has designated an Information Officer responsible for ensuring compliance with this policy and the Act.

  • Information Officer: Horizon Labs (Pty) Ltd
  • Email: hello@horizonlabs.co.za
  • Phone: +27 68 373 5905

Our Information Officer is registered with the Information Regulator of South Africa as required by POPIA.

13. How We Protect Your Information

We take appropriate technical and organisational measures to protect your personal information, including:

  • Encryption of data in transit (HTTPS/TLS on all web properties)
  • Secure, access-controlled systems for storing client data
  • Regular software updates and security patches
  • Limiting access to authorised personnel only
  • Contractual data protection obligations imposed on service providers

In the event of a data breach that could result in harm to you, we will notify the Information Regulator and affected individuals as required by POPIA Section 22.

14. Children's Privacy

Our services are directed at business owners and professionals and are not intended for children under the age of 18. We do not knowingly collect personal information from children.

15. Direct Marketing

We may send you marketing communications about our services where you have given us consent, or you are an existing client and the communication relates to similar services. You can opt out at any time by clicking "unsubscribe" in any email or emailing us at hello@horizonlabs.co.za with the subject line "Unsubscribe".

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date, post the updated policy on our website, and notify existing clients by email where the change significantly affects how we process their information.

17. Contact Us

If you have any questions, concerns, or complaints about how we handle your personal information:

  • Horizon Labs (Pty) Ltd
  • Email: hello@horizonlabs.co.za
  • Phone/WhatsApp: +27 68 373 5905

Information Regulator of South Africa

  • Website: inforegulator.org.za
  • Email: inforeg@justice.gov.za
  • Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

This privacy policy was prepared in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) and the Electronic Communications and Transactions Act 25 of 2002 (ECTA).