Privacy policy.

Last updated: 19 September 2026. This policy is written in line with South Africa's Protection of Personal Information Act (POPIA). It is not a substitute for review by a South African attorney or your own compliance advisor.

1. Who we are. Magu Business Consultants (Pty) Ltd ("Magu", "we", "us"), registration number 2023/889153/07, is the responsible party for the personal information described in this policy. Our information officer can be reached at compliance@magubusiness.co.za.

2. What we collect. Depending on how you use the site, we may collect: your name, email address, and phone number (optional); order and payment history for services, domains, and guides; domain registrant/WHOIS details for any domain you register through us; your folder (account) login details; messages you send us through the chat widget, along with the name and email you give it (or, if you're signed in, the name and email on your folder); and your name and email if you subscribe to our newsletter. We do not collect sensitive personal information (health, biometric, religious or political data, etc.) and don't ask for it.

3. How we use it. We use your information to: deliver a consulting engagement; search for, register, and manage a domain in your name; unlock and give you access to guides you've bought; create and manage your folder; reply to a chat message or enquiry; send you the newsletter, domain newsletter, new-guide announcements, or discount emails you've subscribed to; and meet our own legal, tax, and accounting obligations. We never sell your personal information to third parties.

4. Our legal basis for processing. We process your information because it's necessary to perform a contract with you (delivering a service, domain, or guide you've paid for), because you've given consent (subscribing to the newsletter, giving the chat widget your details), or because we have a legitimate interest in running the business and preventing fraud or abuse.

5. Who we share it with. Your information is stored with Supabase (our database, authentication, and file storage provider) and processed by the following, each bound by their own security and processing terms: Paystack, for payment processing (Magu never sees or stores your full card details); our domain registrar and the relevant registry (for example ZADNA for .co.za, or the applicable registry for other extensions), as required to register or manage a domain in your name; and Resend, to deliver the newsletter or transactional emails you're sent. We don't share your information with anyone else except where required by law.

6. How long we keep it. We keep your information for as long as your folder or newsletter subscription is active, or as long as we're required to by law — for example financial records for tax purposes, or WHOIS data a domain registry requires us to retain. If you close your folder or unsubscribe, we delete or anonymise what we no longer have a legal reason to keep.

7. Cookies & local storage. This site doesn't use tracking cookies or third-party analytics. It uses your browser's own local storage to remember things on your device only — such as keeping you signed in, remembering a name you've given the chat widget so you're not asked twice, and your display preferences. None of this is shared with us or anyone else; it stays on your device until you clear it.

8. Your rights. Under POPIA, you can ask us to access, correct, or delete the personal information we hold about you at any time by emailing compliance@magubusiness.co.za — we'll respond within a reasonable time, subject to what we're legally required to retain. You can unsubscribe from any newsletter or campaign email at any time using the link in the email itself. You can also object to processing based on our legitimate interest, or lodge a complaint with the Information Regulator of South Africa if you believe we've handled your information incorrectly.

9. Children's privacy. This site is not directed at children under 18, and we don't knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we'll remove it.

10. Security. We take reasonable technical and organisational measures to protect your personal information, including relying on Supabase's and Paystack's own security standards for data storage and payment processing. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

11. Changes to this policy. We may update this policy from time to time, for example as the site or the services we offer change. The "last updated" date at the top will reflect the latest version. Continued use of the site after an update means you accept the revised policy.

Questions about this policy, or a request about your personal information — compliance@magubusiness.co.za. Account security concerns — security@magubusiness.co.za. See also our terms & conditions.