1. Responsible party
Thy Mash Projects (Pty) Ltd, Johannesburg South, Gauteng, South Africa, is responsible for the business’s use of enquiry information. Contact thymashprojects@gmail.com or +27 74 310 0759.
- Registration number: [INSERT REGISTERED COMPANY NUMBER]
- Physical address: Johannesburg South, Gauteng, South Africa
- Information Officer: Lebogang Mashego
- Information Officer email: lebomash0@gmail.com
2. Information we collect
The quotation form collects your full name, company name (optional), email, phone number, required service, project location and message, together with your acknowledgement of this policy, a reference number and submission timestamp. Provide a suburb or town rather than an exact address unless it is needed. Do not send identity documents, passwords, medical information or payment details.
The website code does not collect device fingerprints or save IP addresses in enquiry records. Google Firebase receives technical connection information needed to deliver the website and database requests and may process service logs under its own terms. We have not verified every provider log field or its retention period.
3. Purposes and grounds
We use enquiry information to assess your request, contact you, discuss a site assessment, prepare a quotation and keep an appropriate business record. Where applicable, processing may be based on your consent, steps you request before a contract, contractual performance, a legal obligation or a legitimate interest that is assessed against your rights. We do not use the enquiry checkbox as permission for unrelated marketing.
If required contact or project information is missing, we may be unable to respond meaningfully. You can use phone or email instead of the form.
4. Recipients and transfers
Authorised business personnel can access enquiries. Google Firebase provides the website hosting and Firestore database. Other recipients should receive information only when necessary for an agreed purpose, a lawful requirement or your authorisation; no other processors are represented as verified here.
The project’s default Firestore database was created in Johannesburg (africa-south1). This is not a promise that all hosting, support, network or log processing remains in South Africa. Any transfer outside South Africa must be assessed against POPIA’s applicable transfer requirements. Provider terms and transfer arrangements require business review.
5. Security and retention
The implemented database rules validate submissions and block public reading, editing and deletion of saved enquiries. This reduces public exposure but does not eliminate all security risks. Authorised administrators must protect account access and review permissions.
Records should be retained only for the enquiry, resulting business relationship, legitimate record needs and applicable legal requirements. The website does not automatically delete enquiries. The business must approve and operate a retention schedule: [INSERT APPROVED RETENTION SCHEDULE].
6. Your rights and requests
You may request access to information about you, ask for correction, object to qualifying processing, or request deletion where applicable. Where consent is the basis, you may withdraw it; withdrawal does not retrospectively invalidate lawful processing. Some records may still need to be retained on another lawful ground.
Email our Information Officer at lebomash0@gmail.com with “Privacy request” in the subject, explain what you need and include an enquiry reference if available. We may request proportionate identity verification before disclosing records. Do not send unnecessary identity documents with your initial request. See the PAIA and POPIA notice.
7. Cookies and external services
This implementation does not set application cookies or use local storage, analytics tags, advertising trackers, embedded maps or embedded social feeds. See the Cookie Policy. Clicking a WhatsApp or external link takes you to another service with its own practices.
8. Complaints and changes
You can raise a concern with us without losing your right to approach the Regulator. Information Regulator complaints guidance and eServices portal. General enquiries: enquiries@inforegulator.org.za, 010 023 5200. POPIA complaints: POPIAComplaints@inforegulator.org.za; PAIA complaints: PAIAComplaints@inforegulator.org.za. Follow the Regulator’s current guidance on forms and procedures.
We will update this page when the website’s practices change. Review the last-updated date and contact us if you need clarification.