The short version: we collect only what we need to run your account, register your domains, host your services and bill you. We never sell your information. Card details go straight to our payment provider (PayFast or Paystack) and never touch our servers. You can ask to see, correct or delete your information at any time.
1. Who we are
This Privacy Policy explains how NexWave Solutions ("we", "us") handles personal information when you visit our website, use the client portal, request a quote or buy from us. Under South Africa's Protection of Personal Information Act, 2013 (POPIA), we are the "responsible party" for the information described below.
Questions, requests and complaints about privacy go to our information officer at info@nexwave.co.za.
2. What we collect
- Account details: your name, email address, company name, phone number (optional) and a password. Your password is stored only in scrambled (hashed) form; we cannot read it.
- Orders and billing: what you bought (plans, domain names, services), invoices, payment status and the payment reference. We never see or store your card or bank details. You enter those on the payment provider's own secure page.
- Domain registration details: the contact details needed to register a domain in your name.
- Support and quotes: messages, support tickets and quote requests, including whatever you tell us about your project.
- Newsletter: your email address, only if you sign up.
- Technical information: your IP address and browser details, which our systems use to keep the site secure and to limit abuse (for example, repeated sign-up or login attempts).
3. Why we use it
- To create and manage your account and the client portal (to perform our contract with you).
- To process orders and payments, register domains, set up hosting and deliver custom work (to perform our contract with you).
- To answer quote requests and support tickets and to send service messages such as invoices, renewal notices and password resets.
- To keep accounting and tax records (to comply with the law).
- To protect the site, prevent fraud and abuse, and fix problems (our legitimate interest in running a secure service).
- To send our newsletter, only if you asked for it. Every email includes a way to opt out.
We do not sell your personal information, and we do not use it for advertising profiles.
4. Who we share it with
We share information only where it is needed to deliver what you asked for:
- PayFast or Paystack, our payment processors, to take and confirm your payment. They handle your payment details under their own privacy policies.
- Our domain registrar (Truehost) and the relevant domain registries, to check whether a domain is free and to register it for you. Some registries publish certain registrant details in public WHOIS records unless privacy protection applies to your domain.
- Hosting, infrastructure and email providers that run our website and send our messages on our behalf. They may only use your information to provide those services to us.
- Google Fonts and the Tailwind CDN. To display this site, your browser fetches fonts from Google and a styling script from cdn.tailwindcss.com, which means your IP address and browser details reach those providers.
- Professional advisers and authorities, such as accountants or lawyers, or where the law requires us to disclose information.
5. Sending information outside South Africa
Some of the providers above, such as foreign domain registries and Google, operate outside South Africa. We transfer your information abroad only where it is necessary to deliver your order (for example, registering a domain with a foreign registry), or where the recipient is bound by law or agreement to protect it to a standard comparable to POPIA.
6. Cookies and local storage
We use only what the site needs to work. WordPress sets sign-in cookies when you log in to the client portal, and your shopping cart is kept in your own browser's local storage so it survives a page reload. If we have analytics switched on, we use it only to count visits and see which pages are useful, never to identify you personally. Google Analytics sets cookies only after you accept in the cookie notice; until then it stores nothing on your device. Plausible does not use cookies. We do not use advertising cookies. You can change your choice at any time with the Cookie settings link at the bottom of every page. You can also clear cookies and local storage in your browser at any time; you will be signed out and your cart will be emptied.
7. How long we keep it
- Account and service records: for as long as you have an account or active services with us.
- Invoices and financial records: for at least five years, as South African tax and company law require.
- Support tickets and quote requests: for as long as they are useful to serve you, after which we delete or anonymise them.
- Newsletter address: until you unsubscribe.
8. How we protect it
We use reasonable technical and organisational safeguards, including encrypted (HTTPS) connections, hashed passwords and limited access to client information. No system is perfectly secure. If a security breach affects your information, we will tell you and the Information Regulator as POPIA requires.
9. Your rights
You may ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong or out of date (you can also edit your details yourself under Account in the client portal);
- delete or destroy information we no longer have a lawful reason to keep;
- stop using your information for direct marketing, or withdraw a consent you gave earlier.
Email info@nexwave.co.za and we will respond within a reasonable time, normally within 30 days. If you are not satisfied with our response, you have the right to complain to the Information Regulator of South Africa at inforegulator.org.za. We would appreciate the chance to fix the problem first.
10. Children
Our services are for adults and businesses. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, tell us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. If we make a significant change we will notify account holders by email or in the client portal.
12. Contact us
NexWave Solutions, info@nexwave.co.za. You can also open a support ticket in the client portal.