POPIA

Privacy Notice.

How we collect, use and protect your personal information, in line with the Protection of Personal Information Act, 2013 (POPIA). The short version: we only collect what you send us, we use it to reply to you, and we never sell it.

Last updated: 23 September 2026

1. Who we are

Greenlight E2E (“we”, “us”) is the responsible party for personal information collected through greenlighte2e.com. We are based in Pretoria, South Africa.

For any privacy question or request, contact our Information Officer at hello@greenlighte2e.com.

2. What we collect

When you use the contact form or email us:

  • your name, company name and email address
  • optionally, your phone number and your product’s web address
  • the package and start date you select, and anything you write in your message

Automatically, when you visit the site:

  • Your IP address is used briefly in the server’s memory to limit spam on the contact form. We do not store it in a database, and it is cleared within an hour.
  • Our hosting provider keeps standard server logs (such as IP address, pages requested and time) for security and troubleshooting.

What we don’t do:

  • We don’t use analytics, advertising trackers or tracking cookies.
  • The onboarding checklist on our What we need page saves your ticks in your own browser (local storage). That information never leaves your device and we can’t see it.

3. Why we use it

We use the information you send us only to:

  • reply to your enquiry and send you a copy of what you submitted
  • arrange a discovery call and prepare a quote
  • if you become a client, deliver the work and invoice you

We process it because you asked us to contact you, and it is needed to take steps towards an agreement with you (POPIA section 11(1)(b)), or for our legitimate interest in responding to business enquiries (section 11(1)(f)).

We do not send marketing emails or newsletters, and we never sell, rent or trade your information.

4. Who we share it with

We only share your information with the service providers (“operators”) we need to run this website and reply to you:

  • Railway hosts this website and processes form submissions.
  • Hostinger hosts our business mailbox and sends the emails generated by the contact form.
  • Google (Gmail) is where we receive and manage enquiries.

These providers process information on our behalf and are required to keep it secure. We will also disclose information if the law requires us to.

5. Transfers outside South Africa

Some of these providers store data on servers outside South Africa, including in the United States and the European Union. Where this happens, we rely on providers bound by data-protection laws or contractual terms that give a level of protection comparable to POPIA (section 72). By sending us your details, you acknowledge that they may be processed outside South Africa for the purposes above.

6. How long we keep it

  • Enquiries that don’t lead to work: deleted within 12 months of our last contact, or sooner if you ask.
  • Clients: we keep contact and billing records for as long as South African tax and company law requires (generally 5 years).

7. How we protect it

The site is served over HTTPS. Form data goes directly to email and is not stored in a website database. Access to our mailboxes and accounts is protected with strong passwords and two-factor authentication where available. If a security breach affects your personal information, we will notify you and the Information Regulator as POPIA requires.

8. Client project data

When we work with you, we may get access to your codebase, test environments and test-account credentials. That access is governed by our NDA and engagement terms, not this notice. In short: we never need access to production or to real customer data, credentials are kept only in your CI secrets or a password manager, and all our access is removed at handover. See What we need from you.

9. Your rights

Under POPIA you have the right to:

  • ask whether we hold personal information about you, and request a copy of it
  • ask us to correct or delete it
  • object to how we process it
  • withdraw your consent where we rely on it

Email hello@greenlighte2e.com and we will respond within 30 days. We may need to confirm your identity first.

If you are unhappy with how we handled your information, you can complain to the Information Regulator (South Africa).

10. Changes to this notice

We may update this notice from time to time. The date at the top shows when it last changed. If we make a significant change, we will make it clear on this page.