Who we are

Suggested text: Our website address is: https://mjada.online.

Comments

Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Suggested text: If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Suggested text: Visitor comments may be checked through an automated spam detection service.

POPIA

Muhammad Jada Marketing

POPIA Compliance Pack

mjada.online

Privacy Policy  •  Cookie Policy  •  PAIA Manual  •  Consent Templates  •  Breach Checklist

Prepared by and for:  Muhammad Jada, Muhammad Jada Marketing

Date: 14 July 2026

Version 1.0  —  Review date: 14 July 2027

How to Use This Pack

This document has six parts. Parts A and B are written for your website visitors and should be published as pages on mjada.online (linked from your footer). Parts C to F are working documents for you — useful if the Information Regulator, a client, or a visitor ever asks how you handle their data, but not something you need to publish in full.

Part	What it is	Where it lives
A	Privacy Policy	Published page on mjada.online
B	Cookie Policy	Published page (or section within the Privacy Policy)
C	PAIA Manual	Published page, or available on request
D	Consent & form wording	Used to build/update your forms; kept on file
E	Data breach checklist	Kept on file for when you need it

 

NOTE:  This pack is built around what you told me about mjada.online today: a contact form (name, email, business name), Google Analytics 4, MailPoet for email, no online payments yet, no marketing emails yet, and Afrihost hosting. If any of that changes — a new form, a new tool, a new data type — update Part A’s data table and Part F before the change goes live, not after.

 

Part A — Privacy Policy (POPIA)

This is the version to publish on https://mjada.online. Link it from your site footer so it’s reachable from every page — a policy buried inside your terms and conditions doesn’t count as proper disclosure under POPIA.

1. Introduction

Muhammad Jada Marketing (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what personal information we collect through mjada.online, why we collect it, how we use and protect it, and what rights you have over it. This policy is written to comply with the Protection of Personal Information Act 4 of 2013 (POPIA).

By using mjada.online, submitting our contact form, or otherwise providing us with your personal information, you acknowledge that you have read and understood this policy.

2. Who We Are (the Responsible Party)

Muhammad Jada Marketing is a SOLO digital marketing consultancy operated by Muhammad Jada, based in Gauteng, South Africa. For the purposes of POPIA, Muhammad Jada Marketing is the “responsible party” for personal information collected through mjada.online.

Detail	Information
Trading name	Muhammad Jada Marketing for Home Improvement
Responsible party	Muhammad Jada (sole proprietor)
Website	Local SEO and Digital Marketing for home improvement brand and contractors in Gauteng
Location	Gauteng, South Africa
Contact email	hi@mjada.online

 

3. Our Information Officer

As a sole proprietor, Muhammad Jada is the Information Officer for M Jada Marketing by default under POPIA — there’s no separate person to appoint. The Information Officer is responsible for POPIA and PAIA compliance and is your point of contact for any privacy question, access request, or concern.

Detail	Information
Information Officer	Muhammad Jada
Email	[insert dedicated contact email, e.g. privacy@mjada.online]
Registered with the Information Regulator?	[To confirm — see Part F, item 1]

 

ACTION NEEDED:  Being listed as the “owner” or “IT manager” in your domain/hosting account is a different thing from Information Officer registration. Registration is a free, separate step done directly with the Information Regulator (details in Part F). Until that’s done, this section should say “registration in progress” rather than “registered”.

4. What Personal Information We Collect

mjada.online currently collects personal information in one place: the contact form. The table below is your complete data inventory — keep it up to date as the site changes.

Collection point	What’s collected	From whom
Contact form	Name, email address, business name	Prospective clients / enquirers (business owners)
Site analytics (Google Analytics 4)	Device/browser type, approximate location, pages viewed, on-site behaviour, cookie/device identifiers	All site visitors

 

NOTE:  You told me the contact form only asks for name, email, and business name — no phone number or ID numbers. If your Google Ads landing pages use a different or longer form, add a row for each variant so this table stays accurate.

5. How and Why We Use Your Information

We use the personal information we collect for the following purposes only:

• To respond to enquiries submitted through the contact form.
• To assess whether your business is a good fit for our services.
• To follow up about a quote, proposal, or strategy session you’ve requested.
• To understand how visitors use our website, so we can improve it (via Google Analytics 4).
• Once activated, to send you marketing communications about our services — but only if you’ve opted in (see Section 7).

We do not use your information for any purpose beyond these without telling you first and, where required, obtaining your consent.

6. Our Legal Basis for Processing

POPIA requires a lawful basis for every use of personal information. Ours are:

• Consent — you give us your details voluntarily by submitting the contact form.
• Legitimate interest — responding to business enquiries and improving our website through anonymised-where-possible analytics.
• Contract — where we’re corresponding with you about an active or prospective service agreement.

7. Direct Marketing Communications

If you sign up to receive marketing emails or newsletters from Muhammad Jada Marketing  (for example, updates about our services or the Profile to Profit podcast), we will only add you to that list with your clear, opt-in consent — POPIA does not allow pre-ticked boxes or assumed consent for electronic marketing.

• You will always be able to unsubscribe using a link included in every marketing email.
• We keep a simple record of who consented, when, and how (see Part D for the consent register template).
• Opting out of marketing emails will never affect our ability to respond to a specific enquiry you’ve raised with us.
• ALL logins to servers / website and your personal info are protected by 2F Authentication
• backups are kept in a secure (locked) facility and is off site. 

8. Sharing Your Information with Third Parties

We don’t sell or rent your personal information. We do use a small number of service providers to run the website and our business, and your information may pass through their systems for the purposes below.

Third party	Purpose	What they process
Google (Google Analytics 4)	Website analytics	Device data, approximate location, browsing behaviour on mjada.online
MailPoet	Sending email newsletters/marketing (once activated)	Name and email address of subscribers
Afrihost	Web hosting	All data stored on or passing through the website, including form submissions

 

Each of these providers processes information under their own privacy terms, which we’ve reviewed to confirm they align with what’s described here. We remain responsible for how your information is used overall.

9. Cross-Border Transfers

Google and MailPoet operate global infrastructure, which means some personal information (analytics data, and email addresses once marketing is active) may be processed on servers outside South Africa. POPIA (Section 72) allows this provided the recipient is subject to laws, binding agreements, or contractual terms that provide comparable protection to POPIA. Google and MailPoet both publish data processing terms addressing this; MailPoet’s are available on their website and worth a read once you activate their sending service, since their terms may change.

10. How Long We Keep Your Information

We keep contact form submissions and related correspondence for 5 years from the date of last contact, in line with standard South African business record-keeping practice. After that period, we securely delete information that we no longer need for the original purpose or a legal obligation (such as tax record-keeping).

Analytics data in Google Analytics 4 is retained according to our GA4 account settings, which we review periodically to avoid holding data longer than necessary.

11. How We Protect Your Information

We take reasonable technical and organisational steps to keep your information secure, including:

• HTTPS/SSL encryption across mjada.online.
• Website hosting with Afrihost, including their account-level security controls such as two-factor authentication (2FA).
• Regular backups, stored securely in a locked, access-controlled location.
• Access to personal information limited to Muhammad Jada as the sole operator of the business — no other staff or contractors currently have access.
• Strong, unique passwords on all business accounts (hosting, email, analytics, MailPoet).

If we ever become aware of a security compromise affecting your personal information, we will notify the Information Regulator and you, as soon as reasonably possible, in line with our Data Breach Response Checklist (Part E).

12. Your Rights

Under POPIA, you have the right to:

• Be told what personal information of yours we hold and why.
• Request access to the personal information we hold about you.
• Request that we correct or update inaccurate or outdated information.
• Request that we delete personal information we no longer have a valid reason to keep.
• Object to our processing of your personal information for direct marketing at any time.
• Withdraw consent you’ve previously given, at any time (this won’t affect processing already carried out).
• Lodge a complaint with the Information Regulator if you believe we haven’t handled your information properly.

To exercise any of these rights, contact our Information Officer using the details in Section 3. We’ll respond within a reasonable time and at no charge, unless your request is manifestly unfounded or excessive.

13. Children’s Information

mjada.online is aimed at business owners and is not directed at children. We don’t knowingly collect personal information from minors. If you believe a minor has submitted information to us, please contact us so we can delete it.

14. Changes to This Policy

We may update this policy from time to time — for example, if we add a new tool, form, or data use to the website. The “Version” and “Last updated” details at the top of the published page will reflect the latest revision. We encourage you to review this policy periodically.

15. Contact Us & Complaints

Questions about this policy or how we handle your information can be sent to our Information Officer (Section 3). If you’re not satisfied with our response, you can contact the Information Regulator of South Africa:

Channel	Detail
Website	www.inforegulator.org.za
POPIA complaints	POPIAComplaints@inforegulator.org.za
General enquiries	enquiries@inforegulator.org.za
Telephone	+27 10 023 5200  /  0800 017 160 (toll-free)
Physical address	JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Postal address	P.O. Box 31533, Braamfontein, Johannesburg, 2017

 

Cookie Policy

1. What Are Cookies

Cookies are small text files placed on your device when you visit a website. They help the site remember information about your visit, and allow tools like analytics to understand how the site is used.

2. Cookies Used on mjada.online

Cookie / tool	Purpose	Typical duration
Google Analytics 4 (_ga, _ga_*)	Measures site visits, traffic sources, and on-site behaviour so we can improve the website	Up to 14 months

 

NOTE:  This table currently reflects GA4 only. If you later add Google Ads conversion tracking, a Facebook/Meta Pixel, a chat widget, or a heatmap tool (e.g. Hotjar), add a row for each — they all set their own cookies.

3. Managing or Disabling Cookies

You can control or delete cookies through your browser settings at any time — most browsers let you block cookies from specific sites or all sites. Note that blocking cookies may affect how some parts of the website function.

• To opt out of Google Analytics specifically, you can install the Google Analytics Opt-out Browser Add-on, available from Google’s website.
• Most mobile and desktop browsers also include a “private” or “incognito” browsing mode that limits cookie storage for that session.