Privacy Policy

Last updated: 16 October 2026

Umhlabatea (Pty) Ltd (“we”, “our”, or “us”) operates the umhlabatea.cloud website and related OHS compliance products. This Privacy Policy describes how we collect, use, and protect personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Responsible Party

Umhlabatea (Pty) Ltd is the responsible party under POPIA.
Contact: our contact form

2. Information We Collect

We collect the following categories of personal information:

• Contact submissions: Name, email address, company name, and message content submitted via our contact form.
• Purchase information: Transactions processed via Gumroad are subject to Gumroad's privacy policy. We do not store payment card details.
• SENTINEL queries: We log a preview (first 100 characters) of questions submitted to our OHS intelligence system, the request identifier, and technical metadata. We do not log full question text.
• Technical data: We store a SHA-256 hash of your IP address for fraud prevention — this hash cannot be reverse-engineered to identify you.

3. Purpose of Processing

• Responding to contact enquiries (lawful basis: legitimate interest).
• Operating the SENTINEL OHS intelligence system (lawful basis: legitimate interest).
• Fraud prevention and anti-spam (lawful basis: legitimate interest).
• Improving our products and services (lawful basis: legitimate interest).

4. Retention

Contact submissions are retained for 24 months unless you request earlier deletion. SENTINEL request logs are retained for 12 months. We delete data upon verified written request.

5. Sharing

We do not sell, rent, or share your personal information with third parties for marketing. Information may be shared with:

• Supabase: Our database provider (data stored in their secure infrastructure).
• Gumroad: Payment and product delivery for digital product purchases.
• Law enforcement or regulatory bodies when required by law.

6. Your Rights Under POPIA

You have the right to:

• Access your personal information held by us.
• Correct inaccurate personal information.
• Request deletion of your personal information.
• Object to processing of your personal information.
• Lodge a complaint with the Information Regulator of South Africa: inforegulator.org.za

To exercise these rights, write to us through our contact form.

7. Security

We use industry-standard security measures including HTTPS/TLS encryption, hashed identifiers, row-level security in our database, and access controls to protect your information.

8. Cookies

This website does not currently use tracking or advertising cookies. We may use strictly necessary session cookies for form security. No third-party advertising cookies are placed.

9. Changes

We may update this policy. Material changes will be announced via this page with a revised date.

10. Contact

For privacy enquiries: our contact form