Privacy Policy

1. Scope: this website only

This policy covers personal information collected through this company website and through emails you send us about our services.

Our apps and games have their own privacy policies. For example, Pace's policy is at paceinterval.com/privacy-policy. Information processed inside those products is governed by their own policies, not this one.

2. Information we collect

• Information you give us: if you email us, we receive your name, email address, and anything else you choose to include, such as your company or project details.
• Technical information: this website is hosted on Firebase Hosting (Google). Like most web hosts, it automatically logs technical data when you visit. This includes your IP address, browser type, device and operating system, referring page, and the date and time of your visit. This website also loads fonts from Google Fonts, which means your browser sends your IP address to Google when the page loads.
• Analytics: we use Google Analytics for Firebase to understand how many people visit and which pages they view. We set it up so it uses no cookies. Instead, it keeps a random visitor ID on your device (see below) so we can tell new visitors from returning ones. It collects aggregated information such as pages viewed, approximate location (country or city), device and browser type, and the website that referred you. Google Analytics does not log or store IP addresses. Google signals and ad personalisation are turned off, and we don't use analytics data to identify you.
• Information stored on your device: your Sun Chaser high score is saved in your browser's local storage. It stays on your device and is never sent to us. For analytics, we also keep a random visitor ID in local storage, and Firebase keeps a random installation ID in your browser's IndexedDB storage. These IDs aren't linked to your name or email. You can delete all of this at any time by clearing your browser's site data for this website.

This website doesn't use any cookies, including advertising or tracking cookies. If that changes, we'll update this policy first.

3. How we use your information

We use personal information only to:

• reply to your enquiries and discuss potential projects with you;
• run, secure and improve the website;
• measure basic, aggregated visitor statistics, such as how many people visit, which pages they view and how they found us. We have a legitimate interest in understanding how the website is used. We don't use analytics to identify you, build a profile of you, or target ads;
• meet our legal, tax and regulatory obligations;
• send you updates about our work, but only if you have opted in. You can opt out at any time.

4. Sharing your information

We don't sell, rent or trade your personal information. We share it only:

• with service providers who help us run our business, such as Google (Firebase Hosting, Google Analytics for Firebase and Google Fonts) and our email provider. They may use it only to provide their service to us, and they must keep it confidential and secure;
• when the law requires it, or when a court, regulator or law enforcement authority lawfully requests it;
• with a buyer or successor if our business, or part of it, is sold, merged or restructured.

5. Cross-border transfers

Some of our service providers, including Google (Firebase Hosting, Google Analytics and Google Fonts) and our email provider, may store or process information on servers outside South Africa. When that happens, we take reasonable steps to make sure the information gets a level of protection similar to POPIA, as section 72 of POPIA requires.

6. Security

We use reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration and destruction. This includes serving the website over an encrypted connection (HTTPS). No method of sending or storing data over the internet is completely secure, so we can't guarantee absolute security. If a security breach affects your personal information, we'll notify you and the Information Regulator as the law requires.

7. How long we keep it

We keep personal information only as long as we need it for the purpose we collected it for, or as long as the law requires. After that we delete it, or de-identify it.

Google Analytics automatically deletes event-level analytics data after the retention period we set, which is no longer than 14 months. After that we keep only aggregated reports that don't identify anyone.

8. Children

This website is aimed at businesses and adults looking to work with us. We don't knowingly collect personal information from children under 18. If you are under 18, please don't send us personal information without a parent's or guardian's consent. If you believe a child has sent us personal information, contact us and we will delete it.

9. Your rights under POPIA

You have the right to:

• ask whether we hold personal information about you, and request a copy of it;
• ask us to correct, update or delete personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained;
• object to us processing your personal information on reasonable grounds, and object to direct marketing at any time;
• lodge a complaint with the Information Regulator or, if you live in the EU or UK, your local data protection authority.

To exercise any of these rights, email us at lizardsoftherock@gmail.com. We'll reply within 30 days.

You can opt out of analytics at any time. Use a browser or extension that blocks analytics, install Google's Analytics opt-out add-on (tools.google.com/dlpage/gaoptout), or clear this website's data in your browser to reset your visitor ID.

10. Changes to this policy

We may update this policy from time to time, for example if we add features or the law changes. The "Last updated" date above will show when it last changed. If we make a significant change, we'll make it clear on this website.

11. Information Officer and contact

Questions or requests about your personal information can be sent to our Information Officer at lizardsoftherock@gmail.com, or by post to Lizards of the Rock Pty Ltd, Regus Business Centre, Pietermaritzburg, 3201, South Africa.

If you're not satisfied with how we handle your personal information, you can contact the Information Regulator (South Africa). Website: inforegulator.org.za. General enquiries: enquiries@inforegulator.org.za. Complaints: POPIAComplaints@inforegulator.org.za.