Privacy policy
Last updated 6 November 2026
Who I am
Alist is run by Anja van Staden, a sole proprietor in Stellenbosch, South Africa. In this policy, "I" and "me" mean Anja van Staden trading as Alist. I'm responsible for your personal information under the Protection of Personal Information Act (POPIA). If you have any questions about this policy, email me at anvnstaden@gmail.com.
What I collect
When you send an enquiry through the contact form, I receive the details you choose to share:
- your name and, if you add it, your business name
- your email address and, if you add it, your phone or WhatsApp number
- what you need and your timeline
- anything you tell me about your business
The form opens your own email app with your answers filled in, so your enquiry reaches me as an ordinary email. If you email or message me directly, I receive whatever you send.
If we work together, I'll also keep the information needed to deliver your project and invoice you, such as your billing details and the content you send me for your site.
Information collected automatically
This site is hosted on Cloudflare, which processes technical information like your IP address and browser type to deliver the site and protect it from attacks. The fonts are loaded from Google Fonts, so your browser shares your IP address with Google when it downloads them.
I don't use analytics, advertising trackers or cookies of my own. Cloudflare may set a strictly necessary security cookie to tell people apart from bots. The site stores one small note in your browser's session storage so the intro animation only plays once per visit, and your browser deletes it when you close the tab.
How I use your information
- to reply to your enquiry and send you a quote
- to design, build and support your website if we work together
- to send invoices and keep the records the law requires
I won't sell your information, add you to a mailing list or use it for anything you wouldn't expect.
Who I share it with
I only share your information with the services I need to run my business, such as my email provider and web host, or when the law requires it. Some of these services, including Cloudflare and Google, store data outside South Africa. I only use providers that protect personal information to a standard comparable to POPIA.
How long I keep it
If an enquiry doesn't turn into a project, I delete it within 12 months. If we work together, I keep project and billing records for as long as South African tax law requires, which is currently five years.
Keeping it safe
I take reasonable steps to protect your information, including secure, password-protected accounts and only keeping what I need. No system is perfectly secure, but if a breach ever affects your information, I'll let you know and report it as POPIA requires.
Your rights
Under POPIA you can:
- ask what personal information I hold about you
- ask me to correct or delete it
- object to me using it
Email anvnstaden@gmail.com and I'll respond as soon as I can. If you're unhappy with how I've handled your information, you can complain to the Information Regulator.
Changes to this policy
If I change how I handle your information, I'll update this page and the date at the top.