Privacy Notice

Last updated: 2026/07/23

1. Who we are

LEBOWEBX ("we", "us") is a South African design studio. We are the data controller of any personal information you provide to us through our website or when you purchase our services.

2. What we collect

• Contact details — name, email, phone number you give us via the brief form or at checkout.
• Project brief — the service, budget and description you submit so we can quote and deliver your project.
• Order data — items purchased and transaction reference (we do not store full payment card details — Paddle handles that).
• Technical data — IP address, browser, basic device info, and usage data via standard server logs and (optionally) cookies.

3. Why we use it

• To respond to your enquiry and deliver the service you purchased (contract performance).
• To send order confirmations and project communications (contract performance).
• To improve the site, prevent fraud, and keep things secure (legitimate interests).
• To comply with tax and other legal obligations (legal obligation).

4. Who we share it with

• Paddle — our payment processor and Merchant of Record. Paddle handles checkout, payment, tax compliance, invoicing and refunds. See Paddle's privacy notice.
• Service providers — hosting, email, analytics and similar tooling that helps us run the studio.
• Professional advisors — accountants, lawyers, where needed.
• Authorities — when required by law.

5. Data retention

We keep order records as long as we need to for accounting, tax and contractual purposes (typically 5 years). Marketing data is kept until you ask us to remove it. After that, data is deleted or anonymised.

6. International transfers

Some of our service providers (including Paddle) process data outside of South Africa. Where this happens, we rely on standard contractual safeguards.

7. Your rights

You have the right to access, correct, delete or restrict the use of your personal data, and to object to processing or withdraw consent at any time. Email Nkgapelemasi10@gmail.com to exercise these rights.

8. Security

We use appropriate technical and organisational measures (TLS, access controls, encrypted backups) to protect your data. No system is 100% secure, but we take it seriously.

9. Cookies

We use essential cookies to keep the site working (e.g. remembering your cart). We don't currently use marketing cookies. If that changes we'll update this notice and ask for consent where required.

10. Contact

Questions about privacy? Email Nkgapelemasi10@gmail.com.