Privacy Policy

Who we are

Letlou Energy (Pty) Ltd is a private company incorporated in South Africa, with its registered office at 13 Irene Avenue, Riviera Park, Mahikeng, North West Province, 2745.

For the purposes of POPIA, Letlou Energy is the responsible party in respect of personal information processed through this website and our business operations.

Information we collect

Information you give us directly

• Contact enquiries: name, email address, phone number, and any message content submitted via our contact section or by email.
• Job applications: name, email address, phone number, CV, qualifications, salary information, and cover note submitted through the careers application form.
• Business communications: personal information exchanged in the course of client, supplier, or partner correspondence.

Information collected automatically

• Usage data: browser type, operating system, pages visited, time and date of visit, and referring URL — collected via server logs or analytics tools.
• Cookies: see Section 9 below.

Information we do not collect

We do not intentionally collect special personal information (as defined in POPIA Section 26), including race, religion, health, sexual orientation, or criminal history, through this website.

How we use your information

• To respond to enquiries and provide information about our services.
• To process and evaluate job applications.
• To deliver and improve our website and services.
• To comply with legal and regulatory obligations.
• To manage our business relationships with clients, suppliers, and partners.
• To send service-related communications where you have requested them.

We will not use your personal information for unsolicited marketing without your explicit consent.

Lawful basis for processing

Under POPIA, we process personal information on the following grounds:

• Consent: where you have provided explicit consent (e.g. subscribing to communications).
• Contractual necessity: where processing is necessary to perform a contract with you or to take pre-contractual steps.
• Legitimate interest: where processing is necessary for our legitimate business interests (e.g. managing client relationships, improving our services), provided these are not overridden by your rights.
• Legal obligation: where processing is required by law.

Sharing your information

We do not sell, rent, or trade personal information. We may share your information with:

• Service providers: third-party providers who process data on our behalf (e.g. web hosting, email delivery, analytics). These operators are bound by confidentiality and data protection obligations.
• Professional advisors: legal, financial, or HR advisors where necessary.
• Regulators and authorities: where required by law, court order, or regulatory obligation.

Any third parties we engage are required to handle personal information in a manner consistent with POPIA.

How long we keep your data

• Contact enquiries: retained for up to 2 years, or until the matter is resolved.
• Job applications (unsuccessful): retained for 6 months after the position is filled, then securely deleted unless you consent to being kept on record.
• Job applications (successful): retained as part of the employment record for the duration of employment and thereafter as required by law.
• Client and business records: retained for the duration of the relationship and for a minimum of 5 years thereafter, in accordance with legal and contractual obligations.

Security

We take reasonable technical and organisational measures to protect your personal information against loss, unauthorised access, disclosure, alteration, or destruction. These include:

• HTTPS encryption on this website.
• Access controls limiting access to personal data to the principal and any sub-contractor or advisor who requires it for the purposes of a specific engagement.
• Secure deletion procedures for data no longer required.

No method of transmission over the internet is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Your rights under POPIA

As a data subject under POPIA, you have the right to:

• Access: request a description of the personal information we hold about you.
• Correction: request that we correct inaccurate or incomplete information.
• Deletion: request that we delete your personal information, subject to legal and legitimate business retention requirements.
• Objection: object to the processing of your personal information on grounds of legitimate interest.
• Withdrawal of consent: where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
• Complaint: lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, contact us using the details in Section 13.

Cookies & Analytics

We use cookies and similar tracking technologies on our website. For detailed information about the cookies we use, the data they collect, and how you can control your cookie preferences, please read our separate Cookie Policy.

In summary, we use:

• Strictly necessary cookies — essential for the website to function.
• Google Analytics 4 (GA4) — to understand how visitors interact with our site.
• Functional cookies — to remember your cookie preference.

You can accept or decline analytics cookies using our cookie consent banner. Your preference will be remembered until you clear your browser's local storage or cookies.

Session recording & analytics tools

In addition to Google Analytics 4, we use Microsoft Clarity, a session recording and heatmapping tool provided by Microsoft Corporation. Clarity records anonymised mouse movements, clicks, and scroll behaviour to help us understand how visitors interact with our website. Clarity does not capture passwords or payment information.

Microsoft Clarity is loaded only after you have consented to analytics cookies. You can withdraw consent at any time by clearing your browser's local storage. For more information, see Microsoft's Privacy Statement.

Cross-border transfers of personal information

Some of our third-party service providers (including Google LLC and Microsoft Corporation) store and process data on servers located outside South Africa, including in the United States. These transfers are subject to binding data processing agreements that require the recipient to protect personal information to a standard consistent with POPIA.

By consenting to analytics cookies, you acknowledge that your anonymised usage data may be transferred to and processed in jurisdictions outside South Africa in accordance with section 72 of POPIA and the agreements described above.

Security breach notification

In the event of a security compromise involving your personal information, Letlou Energy will notify the Information Regulator of South Africa and affected data subjects as soon as reasonably possible, in accordance with section 22 of POPIA. We will take all reasonable steps to contain the breach and prevent further unauthorised access.

Record of processing activities

Letlou Energy maintains an internal record of its personal information processing activities as required by POPIA. This record is available to the Information Regulator upon request. It is not published publicly but can be summarised on request by contacting the Information Officer at the details in Section 13.

10. Third-party links

Our website may contain links to third-party websites (e.g. Google Maps, LinkedIn, World Bank). We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's privacy

This website is directed at business professionals and is not intended for persons under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Where changes are material, we will take reasonable steps to notify affected individuals. Continued use of the website after changes constitutes acceptance of the revised policy.

13. Contact & complaints

For questions, requests, or concerns about this Privacy Policy or how we handle your personal information, contact our Information Officer:

If you are not satisfied with our response, you may lodge a complaint with the Information Regulator of South Africa: