Privacy
Last updated: 4 September 2026. This policy explains how Lumenyl (Pty) Ltd (“Lumenyl”) handles information you share with us. It is written for the Protection of Personal Information Act (POPIA). It is not legal advice.
Responsible party
Lumenyl is the responsible party for this website. For privacy requests, email the Information Officer at hello@lumenyl.com or ryan@lumenyl.com.
What we collect
Contact form submissions may include your name, email, company, and message. If you start a chat from the WhatsApp links on this site, that conversation is processed by Meta (WhatsApp)—we do not receive it through this website. The public site scan may collect the URL you submit, scan results, and—if you request a full write-up—your email address. Portal sign-in via Google Identity Platform stores your Google account email, display name, and provider user id so we can attach you to a client workspace. Invoice records may include company name, amounts, currency, status, and a billing email used for PayFast checkout. Payment attempts store merchant and PayFast transaction ids. Admins may write engagement notes and file links in the CRM; those are not public. Agreement records store document title, status, timestamps, an optional Drive archive URL, and typed-name electronic signatures (the name you type, your Google account email, the version you signed, and the attestation text). We collect only what we need to respond, operate the portal, or deliver the scan.
How we use it
We use this information to respond to inquiries, deliver scan summaries, operate the client portal and invoices, improve the scan, and follow up about consulting engagements when you ask us to. We do not sell personal information and we do not add you to a newsletter from these forms.
Artificial intelligence
The public site scan scores public site signals with a rules-based heuristic. When a PageSpeed API key is configured, the submitted URL is sent to Google PageSpeed Insights (usually processed outside South Africa) to collect Lighthouse and Chrome UX field metrics. Internal admin assist may send workspace summaries to Vertex Gemini when enabled; drafts never auto-send email. Admin insight drafts may use the same Vertex path and stay private until an admin exports MDX and publishes via git — they never auto-publish. Model and PageSpeed traffic may use regions outside South Africa. Cross-border transfers rely on operator contracts and POPIA section 72.
Cookies and local storage
After Google sign-in we set an HttpOnly session cookie (lumenyl_session) so you stay signed in. Theme preference (light, dark, or system) is stored in the browser’s local storage. We do not use marketing analytics pixels or advertising cookies. When configured, we may load a cookie-less Plausible script on public marketing pages only (not portal, admin, sign-in, or pay) so we can see page counts. Plausible does not set advertising cookies.
Storage and processors
Hosting, sign-in, and the client portal use Google Cloud (Cloud Run, Cloud SQL, Identity Platform, Secret Manager, and logging) with a preference for Johannesburg (africa-south1). Contact and invoice emails use Google Workspace. Invoice checkout uses PayFast (the only non-Google payment operator), including the Onsite checkout script on lumenyl.com. Subscription tokens and payment ids are stored to run retainers and refunds. Vercel is used as domain registrar and DNS only—not app hosting. When enabled, optional AI paths use Vertex Gemini. Optional cookie-less page analytics use Plausible. WhatsApp click-to-chat is a visitor-chosen handoff to Meta; we do not embed a WhatsApp pixel. These operators act on our behalf. Support, telemetry, or model regions may still leave South Africa; transfers rely on operator contracts and POPIA section 72.
Retention and your choices
We keep inquiry, scan, portal, invoice, and signed agreement records as long as needed to provide the service and for ordinary business records. Email hello@lumenyl.com to request access, correction, or deletion. You may also lodge a complaint with the Information Regulator.
Contact
Questions about this policy: contact us or email hello@lumenyl.com.