Privacy
The short version: the contact form collects what you type so I can reply to you, and Google Analytics counts visits so I can see what’s working. Nothing is sold or used to market to you.
Last updated 6 October 2026
Who is responsible
Cameron Misplon, trading as Codewright, is the responsible party for personal information collected through this site, and acts as its own Information Officer under POPIA.
Any question about this policy, or any request under it, goes to hello@codewright.co.za and is answered by me personally.
What is collected
From the enquiry form: your name, email address and message, plus your company name, budget range and how you found me if you choose to give them.
When you submit the form, your IP address is sent to Cloudflare Turnstile to check the submission isn’t automated. It’s used for that check and isn’t stored with your enquiry.
From every visit: Google Analytics records which pages you view, roughly where you are (country and city, not your address), your device and browser, and the site you came from. It doesn’t receive your name or email address.
Why it is collected
Enquiries: to read them and reply. That’s the whole purpose. They aren’t used for marketing, added to a mailing list, sold, or shared with anyone for their own use.
Visits: to understand how people find the site and which pages help them, including whether visitors who arrive from a Google ad go on to get in touch.
Cookies and tracking
This site uses Google Analytics, which sets cookies (named _ga and _ga_ followed by an ID) to recognise a returning browser. There are no other cookies, advertising pixels or social media trackers.
You can block these cookies in your browser settings, or use Google’s opt-out add-on at tools.google.com/dlpage/gaoptout. The site works exactly the same either way.
If you switch between light and dark, your browser remembers the choice in its own storage, on your device. Google Analytics counts that a switch happened, as it does a page view.
Who else processes it
These service providers handle information on my behalf, each under their own contractual obligations:
- Cloudflare: serves this site, filters automated traffic and counts visits without cookies.
- Resend: delivers the enquiry to my inbox as an email.
- Supabase: stores the enquiry in a database, in the European Union (Supabase, AWS eu-west-1).
- Google: runs Google Analytics, in the United States. Google also runs Google Ads, and I use the analytics to measure whether ads lead to enquiries.
This means your information is processed outside South Africa. POPIA permits this where the receiving country or the provider offers comparable protection, which these providers do contractually. If you would rather not have your information leave South Africa, email me directly instead of using the form and I will keep it to correspondence only.
How long it is kept
Enquiries that don’t become projects are deleted within 12 months.
Google Analytics data is kept for 14 months and then deleted automatically.
Where we work together, correspondence and project records are kept for 5 years after the work ends, because tax and company law require records of business transactions to be retained.
You can ask me to delete your enquiry sooner and I will, unless I am legally required to keep it.
Your rights
Under POPIA you may, at any time and free of charge:
- Ask what personal information I hold about you.
- Ask me to correct anything that is wrong.
- Ask me to delete it.
- Object to how it is being used.
- Complain to the Information Regulator of South Africa if you are not satisfied with how I have handled it.
Email hello@codewright.co.za for any of the first four and I will action it within 30 days. The Information Regulator can be reached at inforegulator.org.za.
How it is protected
The site is served only over an encrypted connection. Enquiries are stored in a database configured to refuse all public access, so the records are reachable only by this site’s server and by me.
No system is perfect. If a breach ever affects your information, POPIA requires me to notify both you and the Information Regulator, and I will.
Changes
This policy was last updated on 6 October 2026. If it changes materially, the date changes with it. There is no archive of previous versions; if that matters to you, ask and I will tell you what changed.