Privacy Policy

Last updated: 28 August 2026

Monelia Creations (Pty) Ltd (“Monelia Creations”, “we”, “us”) respects your privacy. This notice explains what personal information we collect through https://moneliacreation.netlify.app, why we collect it, how we use and protect it, and the rights you have under the Protection of Personal Information Act, 2013 (POPIA).

1. Who we are (Responsible Party)

• Legal / trading name: Monelia Creations (Pty) Ltd
• Company registration number: [TO BE SUPPLIED BY THE BUSINESS — company registration number]
• Address: [TO BE SUPPLIED BY THE BUSINESS — physical / postal address]
• Email: Mamphale@gmail.com
• Phone / WhatsApp: 072 576 8998
• Website: https://moneliacreation.netlify.app
• Information Officer: [TO BE CONFIRMED BY THE BUSINESS — name of the Information Officer]

2. What personal information we collect

We only collect information you choose to give us. Through this website that is:

Quote / enquiry form

• Your name
• Your phone or WhatsApp number
• Your email address (optional)
• The type of event, an estimated event date and the services you are interested in
• Any details you type into the message field
• A record that you ticked the privacy consent box, the wording you agreed to, and the date and time

Bookings

Where an enquiry becomes a booking, we record the same contact details together with the preferred date, time and notes about the work requested.

Direct contact

If you email, call or WhatsApp us, we hold whatever information is contained in that conversation.

Administrator accounts

Staff who manage the website have an account with a name, email address and securely hashed password.

Please do not send us sensitive personal information (for example identity numbers, health information, religious or political beliefs, or card details) — we do not need it, and our forms do not ask for it. We do not process payments through this website.

3. Why we collect it and our legal basis

• To respond to your enquiry and prepare a quote — based on your consent and on steps taken at your request before entering into a contract.
• To arrange, deliver and manage a booking — necessary to perform our agreement with you.
• To keep business records — our legitimate interest and, where relevant, legal obligations.
• To secure the website and its administration area — our legitimate interest.

We do not sell your personal information, and we do not use your enquiry details for marketing unless you separately agree to that.

4. How your information is stored and protected

Enquiries and bookings are stored in a managed, access-controlled cloud database. Reasonable technical and organisational safeguards are in place, including:

• Encrypted connections (HTTPS/TLS) between your browser and our services
• Database access rules that allow the public to submit an enquiry but only allow signed-in administrators to read enquiry, booking and customer records
• Password-protected administrator accounts with a forced password change on first use
• No customer records are published on the public website

No system can be guaranteed to be completely secure, but we take reasonable steps to protect the information entrusted to us.

5. Who we share information with

We do not sell or rent personal information. We share it only with service providers who help us run the website and the business, and only as needed:

• Netlify — website hosting and content delivery (server logs may include your IP address and browser type).
• Supabase (via Lovable Cloud) — the managed database, authentication and file storage where enquiries, bookings, services, gallery images and website content are held.
• Google Fonts — typefaces are loaded from Google's servers, so your IP address is visible to Google when a page loads.
• WhatsApp / Meta — only if you choose to click a WhatsApp link or message us; that conversation is then also subject to WhatsApp's own privacy terms.
• Email and telephone providers — used to reply to you.
• Professional advisors or authorities where we are legally required or permitted to disclose information.

Some of these providers process and store data outside South Africa. Where information is transferred cross-border, we rely on providers who commit to appropriate levels of protection as contemplated by section 72 of POPIA.

6. Cookies, analytics and tracking

This website does not use Google Analytics, Google Tag Manager, the Meta Pixel, advertising trackers, heat-mapping tools or any other third-party analytics or tracking scripts, and it does not set advertising or analytics cookies.

The only browser storage used is strictly necessary:

• Administrator sign-in session — when a member of staff signs in to the admin dashboard, an authentication token is stored in their browser so they stay signed in. This is not set for ordinary visitors.
• Website content cache — small local values used by the site to display content correctly. These do not identify you.

Because no tracking or advertising technologies are used, no cookie-consent banner is displayed. If analytics or marketing tools are added in future, this notice will be updated and an appropriate consent mechanism will be introduced.

7. How long we keep your information

We keep personal information only for as long as it is needed for the purpose it was collected for, or for as long as the law requires or permits. In practice:

• Enquiries that do not become bookings — retained for the period specified by the business: [RETENTION PERIOD TO BE SPECIFIED BY THE BUSINESS].
• Bookings and related records — retained for the period specified by the business, taking account of tax, accounting and other legal record-keeping requirements: [RETENTION PERIOD TO BE SPECIFIED BY THE BUSINESS].
• Administrator accounts — retained while the person needs access, then removed.

When information is no longer needed it is deleted or de-identified. We have not invented retention periods on the business's behalf; the placeholders above are completed by Monelia Creations based on its own operational and legal requirements.

8. Your rights under POPIA

Subject to the conditions in POPIA, you have the right to:

• Ask what personal information we hold about you and request access to it
• Ask us to correct or update information that is inaccurate or incomplete
• Ask us to delete or destroy information that we are no longer entitled or required to keep
• Object to the processing of your personal information on reasonable grounds
• Withdraw your consent at any time, where consent is the basis on which we are processing your information — this does not affect processing that already took place, and we may still need to keep certain records
• Lodge a complaint with the Information Regulator

To exercise any of these rights, email Mamphale@gmail.com or call 072 576 8998 with your request and enough detail for us to identify your records. We will respond within a reasonable period. Formal access requests under the Promotion of Access to Information Act may be made on Form 2 available from the Information Regulator.

9. Complaints to the Information Regulator

If you are not satisfied with how we have handled your personal information, you may complain to:

• The Information Regulator (South Africa)
• Website: inforegulator.org.za
• General enquiries: enquiries@inforegulator.org.za
• POPIA complaints: POPIAComplaints@inforegulator.org.za

10. Security compromises (data breaches)

If we reasonably believe that personal information in our care has been accessed or acquired by an unauthorised person, we will handle the incident in line with section 22 of POPIA: investigating and containing the compromise, and notifying the Information Regulator and the affected people as soon as reasonably possible after the discovery, unless a public body or the Regulator directs otherwise. We cannot guarantee that a compromise will never occur, but we will deal with one responsibly and transparently.

11. Children

This website is not directed at children. We do not knowingly collect personal information about a child without the consent of a competent person. If you believe we hold such information, please contact us and we will remove it.

12. Links to other websites

Our site may link to third-party sites and services (such as WhatsApp or social media). We are not responsible for their privacy practices; please review their own notices.

13. Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last revised.

14. Contact us

For anything relating to your personal information, contact Monelia Creations at Mamphale@gmail.com or 072 576 8998. See also our Terms & Conditions.