Draft, not yet in force. This text is awaiting approval by the business owner and is published here for review only.
Privacy notice
Draft Rev 0A, 8 November 2026. Written to meet the Protection of Personal Information Act (POPIA, South Africa) and the General Data Protection Regulation (GDPR, EU and UK) for the people whose information we hold.
Who is responsible
The responsible party (controller) is the sole proprietor operating Reachable Web in South Africa. The owner's name, postal address and contact email will appear here before the service goes live.
What we collect, why, and for how long
| When | What | Why | Kept for |
|---|---|---|---|
| Free scan request | The page address, your email address, the time, your browser type, and a one-way hash of your network address | To run the scan and email it to you; the hash limits abuse of the form | 30 days |
| Free scan | A copy of the page as our browser saw it, screenshots, and the scan results | To produce the result and answer questions about it | 30 days |
| Paid audit | Order details passed to us by the payment platform (name, business name, email, country, amount), the page addresses, the page captures, screenshots and the report | To do the work, deliver it, run the re-test, handle disputes and keep accounting records | Report and captures 12 months; accounting records 5 years as the law requires |
| Tips (optional) | Your email address and the fact that you ticked the box | To send occasional accessibility tips and service news | Until you unsubscribe |
| Correspondence | Emails you send us | To answer you | 12 months after the last message |
Legal basis under GDPR: performance of a contract (orders and free scans you request), legitimate interest (abuse prevention, keeping records of our work), consent (tips), and legal obligation (accounting records).
Who else sees it
- Cloudflare hosts this site and receives form submissions (United States and global network).
- An email provider sends results and replies; it will be named here before launch.
- Payment platforms (Fiverr, PayPal and, later, others named at checkout) process payments under their own privacy terms and pass us the order details above.
- The AI model provider whose system reviews the page evidence receives the page content and screenshots of the pages you asked us to test, not your personal details.
We do not sell personal information and we do not use advertising trackers. This site sets no cookies and runs no analytics scripts at present; if that changes, this notice will say so first.
Where it is stored
Scan data is processed on equipment in South Africa and stored with Cloudflare, whose network is worldwide. Transfers out of South Africa and the EU rely on the providers' standard contractual terms.
Your rights
You may ask what we hold about you, have it corrected or deleted, object to processing, or withdraw consent for tips at any time by writing to the contact address above. If you are not satisfied, you may complain to the Information Regulator (South Africa, inforegulator.org.za) or your local data-protection authority.
Children
The service is for businesses and website owners. We do not knowingly collect information from children.
Changes
We will post changes here with a new date.