Your information, and what we do with it.

Heferon (Pty) Ltd, registration number 2026/337285/07, Cape Town, South Africa. We are the responsible party for the information you send us through this website.

Our Information Officer is Eugene Hefer, co-founder. You can reach the Information Officer at the email address in the contact section below.

When you book a call, the form asks for:

• your name
• your work email address
• your company name, if you choose to give it
• what you write in the message box

The site sets no cookies and does not track you across other websites. We count page visits with Vercel Web Analytics, which records the page, the referring site, your country and your device type in aggregate. It does not use cookies and does not store your IP address or anything that identifies you.

We do not buy data about you, and we do not sell or rent what you give us to anyone.

Only to reply to your enquiry and book the call you asked for, and to keep a record of the conversation if we go on to work together. We process it because you asked us to contact you (POPIA section 11(1)(b) and (d)).

Sending the form does not sign you up for a newsletter or a marketing list.

These service providers process your information on our behalf, under contracts that require them to keep it secure:

• Vercel hosts this website. The form is processed by a Vercel function running in Cape Town. Like any web host, Vercel keeps short-lived request logs, which include your IP address and browser type.
• HubSpot is our customer relationship system. Your enquiry is stored in HubSpot's European Union data centre.
• Google Workspace runs our email, so if you write to us, or we reply, the messages are held by Google.
• Telegram tells us a booking has arrived. The alert carries only a link to the record in our CRM, never your name, email or message.

Storing your enquiry with HubSpot in the European Union, Vercel's request logs, and our email with Google are transfers outside South Africa. POPIA section 72 allows them because each provider is bound by law or by its data-processing agreement to protect your information to a standard substantially similar to POPIA, and because the transfer is needed to act on your request.

For as long as we are in contact about your enquiry or working together. When it is no longer needed for that, or when you ask us to, we delete it.

The form travels over an encrypted connection. The function that receives it checks every field, keeps the CRM credentials on the server, and never writes what you typed into its own logs.

Under POPIA you can, at any time and free of charge:

• ask whether we hold information about you, and for a copy of it
• ask us to correct it, or to delete it
• object to us using it
• withdraw your consent where we rely on it
• complain to the Information Regulator

If you are unhappy with how we handled your information, tell us first and we will put it right. You can also complain to the Information Regulator: POPIAComplaints@inforegulator.org.za, 010 023 5200, inforegulator.org.za.

If we change how the site handles your information, we update this page and the date at the top.

To see, correct or delete your information, or to ask anything about this notice, email the Information Officer at privacy@heferon.com. We reply within 30 days.