Privacy Policy

Last updated 30 October 2026

This privacy policy explains how I handle personal information when you visit shanilily.com, send an enquiry or request a travel website audit.

Who is responsible for your information

Shani Lily operates shanilily.com and provides website design, SEO, content and website maintenance services from Pretoria, South Africa. In this policy, “I”, “me” and “my” refer to Shani Lily.

My business address is 161 Roos St, Doornpoort, Pretoria, 0186, South Africa. For privacy questions or requests, email info@shanilily.com or call 067 625 1133.

Information the enquiry forms collect

The contact form asks for your name, email address and message. You can also provide your website address and business or service type, but these two fields are optional.

The travel website audit form asks for your name, email address, travel agency or business name and website address. You can also include an optional message about the help you need.

I collect these details directly from you. If you contact me by email or phone, I also receive the details you choose to share and a record of our correspondence. Please do not send passwords, payment card details, identity documents or sensitive personal information through an enquiry form.

Submitting an enquiry is voluntary. Fields marked as required are needed to send the form and help me respond. If you leave them out, the form will not submit. You can use the email address or phone number above instead. There is no general legal requirement for you to submit an enquiry.

How I use your information

I use your enquiry details to respond to you, understand your business and website needs, prepare a quote or audit proposal, and discuss the services you have requested. If you become a client, relevant information is also used to deliver the agreed work, manage our relationship and keep necessary business records.

I process information where needed to take steps you request before entering a contract, perform our agreement, meet legal duties, or pursue legitimate interests such as responding to enquiries and protecting the website. Where consent is the basis for processing, you can withdraw it.

Submitting either enquiry form does not subscribe you to a newsletter or give consent to unrelated marketing. Any separate marketing subscription must provide its own choice and a way to unsubscribe.

Where enquiries are stored

Form enquiries are sent to my email inbox. The travel website audit form also stores submissions in the website’s WordPress database. Enquiry information can appear in email delivery logs and website backups used to maintain the service and investigate delivery problems.

The website and its security services may record technical information such as your IP address, browser details, pages requested and the date and time of a visit or submission. This helps detect spam, investigate errors and protect the website.

Cookies and Google reCAPTCHA

The enquiry forms use Google reCAPTCHA v3 to help distinguish genuine enquiries from spam. Google processes device and browser information and interactions with the website for this purpose, and reCAPTCHA sets a cookie used for its risk analysis. Google’s Privacy Policy and Terms of Service apply to that service.

Website and security features may also use cookies or similar technologies where needed for their functions. You can manage cookies through your browser settings. Blocking cookies or scripts may prevent reCAPTCHA or the enquiry forms from working. If that happens, you can contact me by email or phone.

Who may receive your information

I do not sell your enquiry information. It is used by me and, where necessary, service providers that help operate the website and handle enquiries. These include website hosting, email delivery and storage, security and spam prevention, and backup services. Google provides the Gmail inbox used to receive enquiries and the reCAPTCHA service used on the forms.

Providers receive information relevant to their service. Information may also be disclosed where the law requires it, to respond to a lawful request, or to establish or defend legal rights. If support is needed to resolve a website or email issue, access must be limited to what is necessary for that work.

Processing outside South Africa

Providers such as Google operate internationally, so information may be processed or stored outside South Africa. Privacy laws in those countries may differ from South African law. Google describes its international processing and safeguards in its Privacy Policy.

Transfers must have a lawful basis under the Protection of Personal Information Act, 2013 (POPIA), such as adequate protection through law or a binding agreement, your consent, or necessity for steps you request before a contract. Contact me if you need more information about a provider involved in your enquiry.

How long information is kept

I keep enquiry information for as long as reasonably needed to respond, follow up and keep a useful record of the discussion. If an enquiry leads to paid work, relevant records may be kept for the client relationship and applicable accounting, tax, contractual or legal requirements.

The appropriate retention period depends on the purpose, the status of the enquiry and any legal obligation to retain the record. Information that is no longer needed should be deleted or anonymised. Copies in backups may remain until those backups are replaced under the backup schedule.

You can ask me to delete your information. If a legal obligation or other lawful reason prevents immediate deletion, I will explain this.

Protecting your information

The website uses HTTPS and security software to help protect information and detect suspicious activity. Access to enquiry records should be limited to people who need it to respond or provide a supporting service.

No internet service or storage system can be guaranteed completely secure. If a security compromise affects your personal information, I will follow the applicable POPIA notification requirements.

Your privacy rights

Subject to POPIA and any applicable limits, you can ask whether I hold personal information about you, request access to it, ask for inaccurate or outdated details to be corrected, and request deletion where the information is no longer lawfully needed. You may also object to processing on grounds recognised by POPIA or withdraw consent where processing relies on it.

Email info@shanilily.com with your request. I may need proportionate proof of identity before disclosing or changing a record. Withdrawing consent does not invalidate processing that was lawful before withdrawal.

Complaints

You can contact me at info@shanilily.com about a privacy concern. You also have the right to complain directly to South Africa’s Information Regulator.

Email POPIAComplaints@inforegulator.org.za, call 010 023 5200, or visit the Information Regulator’s contact and complaints page for the current process.

Changes to this policy

I may update this policy when the website, enquiry forms or relevant requirements change. The date at the top shows the latest update. An update does not, by itself, give permission to use your information for a new purpose.