1. The short version
We build and host websites for home service businesses. That means we hold two kinds of information: yours, if you're a business we work with or a visitor to this site, and the enquiries that come through the sites we host, which we only handle on the instructions of the business that owns the site.
We don't sell anything to anyone. We don't use one business's enquiries for another. We don't run tracking cookies or advertising pixels, here or on the sites we build.
2. Who we are
TrustStack is run by Lumi Matwele, Lethabo Bogacwi and Uyanda Dlamini, trading together as TrustStack, a partnership in South Africa.
- WhatsApp: 064 881 6530 (+27 64 881 6530), and this is how we work, including for anything about your personal information
- Based in: Durban, KwaZulu-Natal
Uyanda Dlamini is our Information Officer, the person legally responsible for how we handle personal information. Any question about this policy goes to Uyanda directly, on 082 900 6384.
3. Our two roles
This matters for who you go to about what, so it's worth a moment.
For your information, whether you're a business we work with, someone who enquires, or a visitor to this site: we decide how it's used. That makes us the responsible party.
For the enquiries that come through a site we built, meaning the people who fill in the form on your website: you decide, and we just pass them on. That makes you the responsible party and us your operator.
4. Information about you
4.1 What we collect
- If you visit the site: which pages get viewed, which site you arrived from, roughly which country, and what kind of browser and device. This is counted in aggregate and none of it is tied to you.
- If you message us: your WhatsApp number, your name as it appears, and the conversation itself.
- If you become a customer: your business details, our correspondence, and your billing records.
We never see or store your card details. Payments go through Payfast, a South African payment provider, who handles all of that. If you message us on WhatsApp, we hold that conversation too.
4.2 Why we use it
To reply to you, quote you, build and host your site, support it, send your invoices, keep the tax records the law requires, and keep everything working and secure.
4.3 Marketing
We'll only message you about our services if you've agreed, or if you're already a customer. Ask us to stop and we'll stop, permanently. That doesn't affect the operational messages you need as a customer.
4.4 Cookies and tracking
We don't use tracking cookies, advertising pixels or third-party trackers on this site. There's nothing here to sign in to, and we measure visits with a privacy-focused tool that sets no cookies and stores nothing that identifies a visitor. The sites we build for clients are set up the same way unless the client asks us for analytics or ad tracking, in which case that's their choice to disclose on their own site.
5. Enquiries that come through a site we built
5.1 What we hold
Only what the person typed into the form: their name, their phone number or email address, their suburb, and a short description of the job. Plus the date it came in and whether it was delivered to you.
5.2 What we deliberately don't hold
Your invoices, your quotes, your pricing sheets, your customer database, ID numbers, bank details. We don't ask for it and we don't want it. A website form is not the place for it and we don't build fields that collect it.
5.3 What we do with it
Deliver it to you, by email or WhatsApp as you've set up. Keep it long enough to prove the form is working and to resend anything that goes missing. Nothing else.
5.4 What we never do
- Use one business's enquiries for another business
- Sell, rent or trade anyone's information
- Market our own services to the people who enquire with you
- Use enquiry information to train AI models
- Add tracking or advertising pixels to your site without asking you
6. If you enquired through one of these sites
You contacted the business named on that website. They own the site, we just built and host it, so the information is theirs and not ours.
To have your enquiry corrected or deleted, contact that business directly. They hold it and we only act on their instructions. Tell us as well, on WhatsApp, and we'll pass it on and delete our copy.
You can reach us on 064 881 6530 any time about this. We don't add anyone who enquires through a client's site to any mailing list of ours.
7. Who else is involved
We use a few outside services to actually send things and keep the lights on:
- Payments: Payfast, based in South Africa
- Website hosting and infrastructure, for this site and the sites we build
- Domain registration, in your name
- An email delivery service, to send form enquiries through to you
- Messaging: WhatsApp (Meta)
- Google, for Business Profile and Search Console details on your site, where you've asked for it
- Site analytics: a cookieless tool that counts visits in aggregate. It receives nothing that identifies you.
Each of them is only allowed to use the information to do their job for us.
Your payment information stays in South Africa with Payfast. Some of the others are based overseas, WhatsApp and Google in particular. POPIA allows this where the information is protected to a similar standard, and we make sure that's in place in writing before anything is sent.
We'll also hand over information if the law requires it. Nothing else.
8. How long we keep things
- Enquiries to us that go nowhere: about a year
- Client records: while you're a client, then five years for tax purposes
- Your site's form enquiries: 90 days on our side, then deleted. Your own copy is yours to keep.
- Site files and backups: while you're on the monthly, then 30 days after you leave
Do-not-contact records: forever, because we have to keep these, otherwise we can't honour the request
9. Keeping it safe
Information is encrypted in transit and at rest, access is limited to people who need it, admin accounts use two-factor authentication, and we log what happens. No system is perfect and we won't pretend otherwise.
If there's ever a breach, we'll tell the Information Regulator and anyone affected as quickly as we can, and if it involves enquiries from your website, we'll tell you immediately so you can meet your own obligations.
10. Your rights
Under POPIA you can ask us:
- What we hold about you, and who we've shared it with
- To correct anything wrong
- To delete anything we shouldn't have
- To stop using it, where we relied on your consent or on our own legitimate interests
- To stop marketing to you
WhatsApp Uyanda Dlamini, our Information Officer, on 082 900 6384 and we'll respond within 30 days. It's free, and the message itself is your written record.
11. Complaints
Please tell us first, because we'd rather fix it. But you can go to the regulator at any time:
Information Regulator (South Africa)
Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
010 023 5200 · Toll free 0800 017 160
POPIA complaints: POPIAComplaints@inforegulator.org.za
12. Children
We work with home service businesses. It isn't aimed at anyone under 18 and we don't knowingly collect children's information.
13. Changes
If we change this policy in a way that matters, we'll tell our clients and update the date at the top.
14. Contact
Uyanda Dlamini, Information Officer
WhatsApp: 082 900 6384
Durban, KwaZulu-Natal