Privacy Policy

1. Who We Are

This website, lvmre.com, is operated by Lovemore Chanengeta ("we", "us", "our"), trading as LVMRE, based in Pretoria, South Africa. We are the data controller responsible for your personal information.

2. Information We Collect

2.1 Information You Provide

• Contact form submissions: Name, email address, organization, inquiry type, and message content submitted via our collaboration form (processed by Formspree).
• Email correspondence: Any information you share when emailing us directly.

2.2 Information Collected Automatically

• Usage data: Pages visited, time spent, referral source, browser type, device type, and operating system.
• Cookies: We use essential cookies for theme preferences (dark/light mode) stored in localStorage. See our Cookie Policy for details.
• Log data: IP address, access times, and server logs collected by our hosting provider.

2.3 Information We Do Not Collect

• We do not collect payment or financial information on this website.
• We do not use tracking pixels, retargeting, or behavioral advertising.
• We do not collect sensitive personal information (race, health, biometrics, etc.).

3. How We Use Your Information

We process your personal information for the following purposes:

• To respond to inquiries: Processing contact form submissions and email correspondence.
• To improve our website: Understanding how visitors use our site to improve content and user experience.
• To comply with legal obligations: Where required by applicable law.

Legal basis for processing (GDPR): Legitimate interest (website improvement), consent (contact form submission), and legal obligation (compliance).

Legal basis for processing (POPIA): Sections 11(1)(a) consent, 11(1)(d) legitimate interest, and 11(1)(c) compliance with law.

4. Third-Party Services

We use the following third-party services that may process your data:

We do not sell, rent, or trade your personal information to any third party.

5. International Data Transfers

Some of our third-party service providers are located outside South Africa and the European Economic Area (EEA). Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Adequacy decisions where applicable.
• Compliance with POPIA Section 72 requirements for cross-border transfers.

6. Data Retention

• Contact form data: Retained for up to 24 months after the last interaction, then deleted.
• Server logs: Retained for up to 12 months by our hosting provider.
• Cookie data: Theme preferences persist in your browser's localStorage until you clear it.

7. Your Rights

Under POPIA (South Africa)

As a data subject under POPIA, you have the right to:

• Be notified that personal information is being collected.
• Request access to your personal information.
• Request correction or deletion of your personal information.
• Object to the processing of your personal information.
• Lodge a complaint with the Information Regulator.

Under GDPR (European Union / UK)

If you are in the EU/EEA or UK, you have the right to:

• Access: Request a copy of your personal data.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Restriction: Request restriction of processing.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interest.
• Withdraw consent: Where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Children's Privacy

This website is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

9. Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• HTTPS encryption for all data in transit.
• Secure third-party service providers with their own security certifications.
• Regular review of data processing activities.
• Minimal data collection principle — we only collect what we need.

10. Regulatory Authorities

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

12. Contact

For any privacy-related questions, requests, or complaints: