Privacy Policy
1. Who We Are
Legal Entity Name: LIGHTHOUSE BONDS (PTY) LTD
Registration Number: 2026 / 011685 / 07
Jurisdiction: South Africa (remote)
Physical Address Disclosure:
Lighthouse Bonds is a remote business. For privacy and safety reasons, our physical address is not published online. If you require our physical address for legal service of process or a formal POPIA request, please contact us at privacy@lighthousebonds.co.za and we will provide it directly under a confidentiality obligation. For all other privacy matters, use the email address above.
Email for Privacy Requests: privacy@lighthousebonds.co.za
Information Officer (POPIA): Information Officer – privacy@lighthousebonds.co.za
Data Protection Officer (GDPR): Not required under Article 37(1)
2. What Personal Information We Collect
| Category | Examples |
|---|---|
| Identifiers | Name, email address, IP address, username, website URL |
| Internet/network activity | Browser user agent, cookies, referring URLs, comment metadata |
| Geolocation data | Approximate location derived from IP address; precise location only if you voluntarily upload images with EXIF GPS |
| Inferences | Spam detection scores, comment approval status |
| User content | Comments, images, profile pictures (via Gravatar) |
We do not collect sensitive personal information (race, health, biometrics, political views, financial information).
3. How We Collect Personal Information
- Directly from you (comments, account registration, media uploads)
- Automatically (cookies, server logs, Cloudflare Turnstile)
- From third parties (Gravatar service)
4. Legal Bases for Processing (GDPR & POPIA)
| Processing Activity | Legal Basis |
|---|---|
| Displaying comments with Gravatar image | Consent / Legitimate interest |
| Spam detection | Legitimate interest (website security) |
| Functional cookies | Legitimate interest (necessary for operation) |
| Analytics/marketing cookies (if added later) | Consent (via cookie banner) |
| Legal/administrative retention | Legal obligation |
You may withdraw consent at any time: privacy@lighthousebonds.co.za
5. Cookies
| Cookie Type | Purpose | Duration | Consent Required? |
|---|---|---|---|
| Comment cookies | Save name/email/website | 1 year | No (functionality) |
| Login cookies | Keep you logged in | 2 days / 2 weeks | No |
| Screen options | Save display preferences | 1 year | No |
| Post editing cookie | Indicates post ID | 1 day | No |
| Temporary cookie | Test cookie acceptance | Session | No |
Cookie Consent Banner: EU and US state visitors will see a banner before non-essential cookies.
6. How We Use Your Personal Information
- Display and moderate comments
- Detect and prevent spam (Cloudflare Turnstile)
- Remember your preferences
- Manage user accounts
- Process password resets (includes IP address)
- Comply with legal obligations
We do not sell your personal information.
7. Sharing Your Personal Information
| Recipient | Purpose | Data Shared | Location |
|---|---|---|---|
| Cloudflare (Turnstile) | Spam detection | IP, user agent, comment metadata | USA |
| Automattic (Gravatar) | Profile picture | Email hash | USA |
| Web hosting provider | Website storage | All submitted data | South Africa / EU / USA (depends on infrastructure) |
No sharing with advertisers, data brokers, or unaffiliated third parties.
8. International Data Transfers
Data may be transferred to the United States (Cloudflare, Automattic, some hosting). Safeguards: EU transfers use Standard Contractual Clauses (SCCs); SA transfers use binding agreements ensuring POPIA-equivalent protection.
Request safeguards copy: privacy@lighthousebonds.co.za
9. Data Retention
| Data Type | Retention Period |
|---|---|
| Comments and metadata | Indefinitely (for auto-approval of follow-ups) |
| User profile information | Until account deletion or erasure request |
| Server logs | 30 days |
| Password reset IP | Deleted after request processed |
Legal obligations may override these periods.
10. Your Rights (POPIA, GDPR, CCPA)
All Users
✔ Access & portability (export of your data)
✔ Correction of inaccurate data
✔ Deletion (right to be forgotten)
✔ Object to processing
✔ Withdraw consent
South Africa (POPIA) – Additional
✔ Object to direct marketing
✔ Be notified of data breaches
✔ Complain to Information Regulator: inforeg@justice.gov.za
European Union (GDPR) – Additional
✔ Restrict processing
✔ Data portability (machine-readable)
✔ Complain to your local DPA
California (CCPA/CPRA) – Additional
✔ Know categories and specific pieces of data collected
✔ Opt out of sale/sharing (we do not sell or share)
✔ Non-discrimination
✔ Shine the Light: request third-party disclosure for direct marketing (none)
11. How to Exercise Your Rights
Email: privacy@lighthousebonds.co.za with subject “Privacy Request”. Provide identifying information (email used on our site) and specify your request.
Response time: 30 days (GDPR) / 45 days (CCPA) / reasonable period (POPIA). No fee unless request is manifestly unfounded.
12. Children’s Privacy
Not directed at children under 13 (US/COPPA), 16 (GDPR), or 18 (SA without parental consent). Contact us immediately if a child has provided data.
13. Embedded Content from Other Websites
Articles may embed YouTube, Vimeo, etc. These third parties may collect data and set their own cookies. We do not control them. Review their privacy policies.
14. Security Measures
We use HTTPS, regular updates, limited admin access, and Cloudflare protection. No method is 100% secure.
15. Data Breach Notification
We will notify: SA (Information Regulator and affected data subjects under POPIA), EU supervisory authority within 72h (if feasible), and CA as required by law.
16. Changes to This Privacy Policy
Material changes will be announced on the website and/or by email to registered users. Updated “Last Updated” date at the top.
17. Complaints
First contact us: privacy@lighthousebonds.co.za
If unsatisfied:
- South Africa: Information Regulator – inforeg@justice.gov.za
- European Union: Your local DPA (find at edpb.europa.eu)
- California: CA Attorney General – oag.ca.gov/privacy
18. Contact Us
Lighthouse Bonds
Email: privacy@lighthousebonds.co.za
Physical Address: Provided upon request for legal/regulatory purposes only.
Country: South Africa
Website: https://lighthousebonds.co.za
For spam detection inquiries: Cloudflare Turnstile Privacy Policy
“`