What we collect, and why.

This is what mondobase.com collects when you visit or send one of our two forms, who handles it and how long it stays. It describes how the site works today. If anything is unclear, email [email protected].

Mondobase Web Studio is responsible for your information

The business responsible is Mondobase Web Studio, 741 Skukuza Street, Faerie Glen, Pretoria 0081, South Africa. Privacy questions and requests go to our Information Officer at [email protected].

The contact form collects what you type and how you found the site

When you send the form on our contact page, we receive:

• your name, business name and email address, which we need in order to reply, so the form will not send without them
• your website, your answer to "How did you find us?" and your message, if you fill them in
• how you got here: the first page you landed on, the website that sent you (its name only), any campaign tags in that first link, which of Google Ads, Facebook or Instagram, or LinkedIn added a click code to it, if any, and the page you sent the form from
• your IP address, the internet address your connection came from

Our own records never keep the click code itself. The form emails us everything except your IP address, and our server adds a line with the time, your IP address and the same details to a private log file that cannot be opened from the web.

The free website review collects your email and web address

The free website review needs your email address and the web address to check, and will not run without both. It also records your IP address and most of the same details about how you arrived. We record only the domain, not the full address. The tool reads the public page at that address, plus the site's robots.txt and sitemap.xml files, and works out seven check results without keeping a copy of the page. If the site can be reached, the results are emailed to the address you gave. Either way, we get an email with the request, your IP address and the visit details, and a line goes into the same log file. The tool cannot check who owns an email address, so if you got a review you did not ask for, tell us and we will delete the request.

Google Analytics only runs after you click Accept

We use Google Analytics to see which pages lead to enquiries. If you click Accept on the banner, it sets two cookies, _ga and one starting with _ga_, which last up to two years and let it recognise a returning browser. Your IP address reaches Google with each request, though Google says Google Analytics does not log or store IP addresses.

If you click Reject, or do not choose, Google's analytics code is not loaded at all. No analytics cookies are set and nothing about your visit is sent to Google.

Our code sends Google page views, the fact that a form was sent (which form, never its contents) and taps on our phone, email and WhatsApp links. Depending on the settings in our Google account, Google may also record things like scrolling and clicks on links to other sites. Accept is for analytics only: no advertising is set up on this site, so it does not allow advertising cookies. To change your mind, use Cookie settings at the bottom of any page. Choosing Reject there removes the analytics cookies from your browser, and Google's code is not loaded on the pages you open after that.

A few small things are stored in your browser

• mb-consent remembers your Accept or Reject. It does not expire and is not sent to us.
• mb-src holds the visit details above, clears when you close the tab, and only reaches us if you send a form.
• Cloudflare, which protects the site, may set a cookie to tell people apart from automated traffic. Cloudflare describes its cookies as strictly necessary.

The first two are not cookies. The only cookies are Google's analytics cookies, after you click Accept, and a Cloudflare security cookie if it sets one.

We use it to reply, to keep the forms safe and to see what works

• Replying and sending your review. You asked us to, as a step before any agreement (POPIA section 11(1)(b), GDPR Article 6(1)(b)).
• Keeping a record, stopping abuse of the forms and learning what brings in enquiries. The log file is a backup, so an enquiry is not lost if an email fails. Your IP address lets us limit how often one connection can send a form, and the visit details show us where enquiries come from. The basis is our legitimate interest in not losing enquiries, a safe site and knowing what works (POPIA section 11(1)(f), GDPR Article 6(1)(f)). You can object to this.
• Analytics cookies. Your consent, given by clicking Accept (POPIA section 11(1)(a), GDPR Article 6(1)(a)).

A few service providers handle it for us

• the company that hosts our web server, where the site, forms and log file run and from which the form emails are sent
• Cloudflare, which sits in front of the site for speed and security and so handles visits to it, including your IP address
• the provider that runs our email inbox, which receives the enquiry and review emails
• Google, for analytics as described above

Like most web servers, ours may also keep standard access logs, which record things like IP address, browser and the page requested.

Some of it may be handled outside South Africa

Google and Cloudflare run their services from many countries, and our host and email provider may also store information outside South Africa. POPIA (section 72) allows personal information to be sent to another country only in set cases, such as where the recipient is bound by protection substantially similar to POPIA, where you consent, or where it is needed for something you asked us to do. If the GDPR applies to you, it has its own rules for passing information to providers outside the EU.

Enquiries are not deleted automatically, so ask and we will delete yours

Enquiry and review emails stay in our inbox, and entries stay in the log file, until we delete them by hand. To slow down abuse, the server also keeps small files of submission times against a coded version of your IP address. That coding is not anonymous, and our code does not delete these files. Google keeps analytics data for the period set in our Google Analytics account.

If you want your details removed, email us. We will delete your emails and log entries, unless we still need them for work we are doing for you or the law requires us to keep them, and tell you what we did.

You can see, correct or delete what we hold

Under POPIA you can:

• ask whether we hold information about you, which is free, and ask for a copy or description of it, including who has had access
• ask us to correct or delete information that is wrong, incomplete, misleading, out of date, excessive or unlawfully obtained, or that we no longer have a reason to keep
• object, on reasonable grounds, to use based on our legitimate interest, and object to direct marketing at any time
• withdraw your consent to analytics at any time, using Cookie settings at the bottom of any page

Objections and requests to correct or delete are free. We may need to confirm who you are before handing over records. If you are in the European Union, the GDPR may also apply, and where it does you can also have your information erased, restrict how we use it, and receive it in a format you can take elsewhere. To use any of these rights, email [email protected].

You can complain to the Information Regulator, or in the EU to your local authority

You have the right to complain to the Information Regulator (South Africa). Its website is inforegulator.org.za, where complaints go through its eServices portal, or you can email [email protected]. In the EU, you can complain to the data protection authority where you live or work, or where the problem happened. The European Data Protection Board keeps a list of them.

This site is not meant for children

We work with businesses, not children. We do not knowingly collect information from anyone under 18. If you think a child has sent us their details, tell us and we will delete them.

We update this page when the site changes

If we change what the site collects or how we use it, we will update this page and the date on it.

Last updated 15 September 2026