Effective date: 1 June 2025 ·
Last updated: June 2025 ·
Jurisdiction: Republic of South Africa
POPIA Compliant — Protection of Personal Information Act 4 of 2013
This Privacy Policy explains how Livro ("we", "us", "our") collects, uses, stores, and protects your personal information when you use our website or engage our services. By using our website or services, you consent to the practices described in this policy.
1. Responsible Party
Under the Protection of Personal Information Act 4 of 2013 (POPIA), the responsible party for your personal information is:
2. Information We Collect
2.1 Information You Provide Directly
- Contact details: first name, last name, email address, phone / WhatsApp number.
- Business information: business name, industry, budget range, and project details submitted via our intake forms.
- Communications: messages, emails, or other correspondence you send to us.
2.2 Information Collected Automatically
- Usage data: pages visited, time spent, referring URLs, and browser/device type.
- IP address: collected for security and analytics purposes.
- Cookies: small data files placed on your browser (see Section 9).
3. How We Collect It
We collect personal information through:
- Our website contact and intake forms.
- Direct email, WhatsApp, or phone communication.
- Website analytics tools (such as Google Analytics).
- Social media platforms when you interact with our profiles.
- Cookies and similar tracking technologies.
4. Why We Use Your Information
We use the personal information we collect to:
- Respond to your enquiries and communicate with you about our services.
- Prepare proposals, quotations, and onboard new clients.
- Deliver and manage the services you have engaged us for.
- Send you updates, invoices, or project-related communications.
- Send marketing communications where you have given consent (you may opt out at any time).
- Improve our website, services, and user experience through analytics.
- Comply with legal and regulatory obligations.
- Protect our legal rights and enforce our Terms and Conditions.
5. Lawful Basis Under POPIA
We process your personal information only when we have a lawful basis to do so. Under POPIA, we rely on the following grounds:
- Consent: Where you have freely given your consent, for example by submitting a contact form or opting in to marketing communications.
- Contractual necessity: Where processing is necessary to fulfil a contract with you, such as delivering our services.
- Legitimate interest: Where we have a legitimate business interest, such as improving our services or preventing fraud, provided this does not override your rights.
- Legal obligation: Where processing is required by law.
6. Sharing Your Information
We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:
- Service providers: Trusted third-party vendors who assist in delivering our services (e.g. email platforms, hosting providers, analytics tools). These parties are contractually obliged to handle your data securely and only for the purposes we specify.
- Legal requirements: Where required by law, court order, or a regulatory authority.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
- With your consent: In any other circumstances where you have given explicit consent.
7. Storage & Security
Your personal information is stored on secure servers. We implement reasonable technical and organisational measures to protect your information from unauthorised access, disclosure, alteration, or destruction. These measures include:
- Encrypted data transmission (HTTPS/TLS).
- Access controls limiting who can view personal data internally.
- Regular security reviews of our systems and processes.
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
8. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention periods are:
- Client records: 5 years after the end of the last engagement, in line with general business and tax record-keeping requirements.
- Marketing contacts: Until you unsubscribe or request deletion, whichever comes first.
- Enquiries that did not result in a project: 12 months.
- Analytics data: As per the retention settings of the relevant analytics platform.
When data is no longer required, we securely delete or anonymise it.
9. Cookies & Tracking
Our website may use cookies and similar tracking technologies. Cookies are small text files placed on your device that help us understand how visitors use our website.
Types of cookies we use:
- Essential cookies: Necessary for the website to function correctly. These cannot be disabled.
- Analytics cookies: Help us understand visitor behaviour so we can improve our website (e.g. Google Analytics).
- Marketing cookies: Used to track the effectiveness of our advertising campaigns on platforms such as Meta and Google.
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website. By continuing to use our website, you consent to our use of cookies as described above.
10. Your Rights Under POPIA
As a data subject under POPIA, you have the following rights:
- Right of access: You may request a copy of the personal information we hold about you.
- Right to correction: You may request that we correct any inaccurate or incomplete information.
- Right to deletion: You may request that we delete your personal information, subject to certain legal exceptions.
- Right to object: You may object to the processing of your personal information for direct marketing purposes at any time.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Right to lodge a complaint: You have the right to lodge a complaint with the Information Regulator of South Africa if you believe your rights have been violated.
To exercise any of these rights, contact our Information Officer at janjohanbeukes@gmail.com. We will respond within 30 days.
Information Regulator Contact Details
11. Children's Privacy
Our services are directed at businesses and individuals aged 18 years and older. We do not knowingly collect personal information from children under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete it.
12. International Transfers
Some of the third-party tools and service providers we use (such as Google Analytics, email platforms, or cloud storage) may process or store data outside of South Africa. Where this occurs, we take reasonable steps to ensure that adequate data protection safeguards are in place, consistent with the requirements of POPIA.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will always be available on this page with a revised "Last updated" date. We encourage you to review this policy periodically.
Material changes that significantly affect your rights will be communicated directly where reasonably practicable.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact our Information Officer: