Privacy Policy
Last Updated: 3 February 2026
Lavender Hill Collective ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information when you use our automated Google review management services and visit our website at https://review.lavenderhillcollective.co.za/.
1. Information We Collect
1.1 Information You Provide Directly
● Business Clients: Name, email address, phone number, business name, billing information, and Google Business Profile details when you sign up for our services.
● End Customers: When our clients use our service to request reviews, we may process your customers' contact information (name, email address, phone number) solely for the purpose of sending automated review invitations and follow-ups on behalf of our clients.
1.2 Information Collected Automatically
Website usage data (IP address, browser type, pages visited, time spent on site)
Cookies and similar tracking technologies to improve user experience
Device information and operating system
1.3 Information from Third Parties
● Google Business Profile data (with your authorization)
● Review content and ratings from Google (publicly available)
2. How We Use Your Information
● To provide, operate, and maintain our automated review management services
● To send review request messages via SMS and email on behalf of our business clients
● To generate automated responses to Google reviews
● To process payments and manage billing
● To communicate with you about service updates, support, and marketing (with your consent)
● To improve our services and website functionality
● To comply with legal obligations and protect our rights
3. Legal Basis for Processing (POPIA Compliance)
Under the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa, we process personal information based on:
● Consent: When you explicitly agree to our terms
● Contractual necessity: To fulfill our service agreement with you
● Legitimate interests: To improve our services and ensure security
● Legal obligation: When required by law
4. Data Sharing and Disclosure
We do not sell your personal information. We may share data with:
● Service Providers: Third-party vendors who assist with SMS delivery, email services, payment processing, and hosting (bound by confidentiality agreements)
● Legal Authorities: When required by law, court order, or to protect our rights
● Business Transfers: In the event of a merger, acquisition, or sale of assets
5. Data Security
We implement appropriate technical and organizational measures to protect your information:
● Encryption of data in transit and at rest
● Secure server infrastructure with access controls
● Regular security assessments and updates
● Staff training on data protection practices
However, no internet transmission is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
6. Data Retention
We retain personal information only as long as necessary to:
● Provide our services and fulfill the purposes outlined in this policy
● Comply with legal, accounting, and reporting requirements
● Resolve disputes and enforce our agreements
When no longer needed, we securely delete or anonymize your data.
7. Your Rights Under POPIA
As a data subject in South Africa, you have the right to:
● Access: Request copies of your personal information
● Correction: Request correction of inaccurate or incomplete data
● Deletion: Request deletion of your personal information (subject to legal retention requirements)
● Objection: Object to processing for direct marketing purposes
● Complaint: Lodge a complaint with the Information Regulator of South Africa
To exercise these rights, contact us at: [email protected]
8. Cookies and Tracking
We use cookies to:
● Remember your preferences
● Analyze website traffic and usage patterns
● Improve our services
You can manage cookie preferences through your browser settings. Disabling cookies may affect website functionality.
9. Third-Party Links
Our website may contain links to third-party sites (e.g., Google). We are not responsible for the privacy practices of these external sites. Please review their privacy policies separately.
10. International Data Transfers
While primarily operating in South Africa, some of our service providers may process data outside South Africa. We ensure appropriate safeguards are in place to protect your information in accordance with POPIA requirements.
11. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. The "Last Updated" date at the top indicates when this policy was last revised.
13. Contact Us
For questions, concerns, or requests regarding this Privacy Policy or our data practices, please
Contact:
Lavender Hill Collective
Email: [email protected]
Phone: 064 809 3211
Information Regulator of South Africa:
