Privacy notice

Last updated 3 October 2026

This notice explains how Lumotag collects and uses personal information, as required by section 18 of the Protection of Personal Information Act 4 of 2013 (POPIA).

Responsible party and Information Officer

Information Officer: Dean Anthony Abbott, reachable at hello@lumotag.co.za.

What we collect and why

Customers

Name, email address, mobile number, delivery address and order details, to process, deliver and support your order, and to keep tax records. Providing these is necessary to complete a purchase.

Tag page content

The details you choose to show on your tag pages, such as a business name, Wi-Fi details or a contact number. We publish this on your behalf.

Messages and reports

When someone sends a message or problem report through a tag page, we keep the message and any contact details they choose to include, so it can be passed on to the tag owner.

Taps

Each tap is recorded only as the hour, country, phone type and whether the tag was tapped. We do not store IP addresses, precise location or anything that identifies the person tapping.

Marketing

We send setup guidance and product news only if you opt in at checkout. You can unsubscribe at any time.

Who we share it with

We use these service providers (operators) to run the shop. Each processes information only on our instructions:

• Payfast (South Africa): payment processing. Your card details go directly to Payfast.
• Cloudflare: website hosting and our database. Data may be stored outside South Africa.
• Resend: sending order and dispatch emails. Data may be processed outside South Africa.
• Pudo or our courier: your name, mobile number and delivery address, to deliver your parcel.
• Google Fonts: delivers the website's fonts, which means your browser's IP address is sent to Google when the shop loads.

Where information is transferred outside South Africa, we use providers bound by data protection terms that offer protection comparable to POPIA (section 72). We never sell personal information.

How long we keep it

• Order records: 5 years, as required for tax purposes.
• Tap records: about 13 months.
• Messages and reports: 12 months after they are dealt with.
• Your shopping cart is stored only in your own browser.

Security

All traffic is encrypted. Admin access requires single sign-on. Tag setup codes are stored only as one-way hashes, and every administrative action is logged.

Your rights

You may ask us what personal information we hold about you, and ask us to correct or delete it, or object to its use, by emailing hello@lumotag.co.za. You also have the right to lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za).

Cookies

We do not use advertising or tracking cookies. Your cart is kept in your browser's local storage so it survives a page refresh.