Privacy policy for the Light Industrial website
Last updated 13 October 2026
This policy explains what personal information the Light Industrial website collects, why, who handles it, and what you can do about it. It is written to meet the Protection of Personal Information Act 4 of 2013 (POPIA).
It covers the website at lightindustrial.co.za only. When you become a customer, the subscription agreement and the data handling page explain how we treat the documents and stock data you put through the software.
Who we are
Light Industrial is operated by Hybrida, Cape Town, South Africa. Hybrida is the responsible party under POPIA for the personal information described here.
Legal entity: [Hybrida legal entity name and registration number]Address: 22 on Sloane, 39 Somerset Rd, Green Point, Cape Town, 8005.
Email: donovan@lightindustrial.co.za
Information Officer
POPIA requires us to appoint an Information Officer. Contact them with any question, request or complaint about your personal information.
Information Officer: [Information Officer name]Email: donovan@lightindustrial.co.za
Post: Information Officer, Light Industrial, 22 on Sloane, 39 Somerset Rd, Green Point, Cape Town, 8005.
What we collect and where
We collect personal information in five places on this site.
The contact form
The form on the Contact page, the bottom of the Home page and the Document Intake page asks for your name, company, work email, phone number, how many delivery notes you receive a week, what runs your stock today, and a consent tick. The consent tick is a record that you agreed to be contacted about your enquiry.
The hero form
The short form at the top of the Home page asks for your work email and phone number only.
The savings calculator
The calculator on the Savings page works out what supplier paperwork costs you. To see the full result you enter your work email. We keep the email together with the slider values you set (documents per week, hourly rate and similar), because they tell us what to prepare for a conversation with you.
Calendly bookings
"Book a 30-min demo" opens Calendly in a new tab. Calendly asks for your name, email and the time you choose. Calendly collects this under its own privacy policy and then sends the booking to us.
Cookies and similar technologies
With your consent, analytics and marketing tags record how you use the site: pages viewed, buttons clicked, approximate location, device and browser. The Cookies section lists each one. Our hosting provider also keeps short-lived server logs that include your IP address.
If you email us, we keep the email and your address in our mailbox for as long as the enquiry needs.
Why we use it and the lawful basis
POPIA lets us process personal information only where a justification in section 11 applies. Ours are:
- To answer your enquiry and run a demo. We use your form details to reply, to book and prepare a demo, and to send a quote. Justification: steps you asked us to take before entering a contract, and our legitimate interest in answering people who contact us.
- To send marketing about Light Industrial. We only email you about the product if you ticked the consent box or you are a customer, as section 69 of POPIA requires. Every marketing email has an unsubscribe link.
- To measure and improve the site. Analytics tags run only after you accept analytics cookies. Justification: consent.
- To measure advertising. Google Ads, Meta and LinkedIn tags run only after you accept marketing cookies. Justification: consent.
- To keep the site secure. Hosting logs help us spot abuse. Justification: legitimate interest.
We do not sell personal information. We do not make automated decisions about you that have a legal effect.
Who processes it for us
These companies handle personal information on our behalf (operators under POPIA). Each is bound by contract to use the information only on our instructions. What each one receives depends on your cookie choices.
| Processor | What it receives | Where it is hosted |
|---|---|---|
| HubSpot | Everything you type into a form or the calculator gate, your consent choice, and the page you sent it from. HubSpot is our customer record. With marketing consent, HubSpot's tracking code also links your site visits to your record. | HubSpot's EU data centre (Germany). Portal hosted on the EU1 region. |
| Cloudflare | Serves the site (Cloudflare Pages) and runs the Worker that passes form submissions to HubSpot. Keeps short-lived request logs with your IP address, browser type and the page requested. | Global network, head office in the United States. |
| Google Tag Manager | Loads the analytics and marketing tags below according to your consent. Receives the page address and your IP address in the request. | Google, United States. |
| Google Analytics 4 | Pages viewed, events such as a form submitted or a demo booked, device, browser and approximate location. We never send your name, email or phone number to Analytics. | Google, United States. |
| Google Ads | Conversion events (a form submitted, a demo booked) and the click identifier from a Google ad, so we can tell which ads work. | Google, United States. |
| Meta Pixel | Page views and the events Lead, Schedule and ViewContent, with browser and device data, so we can measure Facebook and Instagram ads. | Meta, United States. |
| LinkedIn Insight Tag | Page views, IP address, device and browser data, so we can measure LinkedIn ads and see which industries visit. | LinkedIn, United States. |
| Microsoft Clarity | How you move through a page: clicks, scrolls and session recordings. Text you type into forms is masked before it is sent. | Microsoft, United States. |
| Calendly | Your name, email, chosen time and anything you type when booking a demo. | Calendly, United States. |
Cross-border transfers
Most of the processors above store information outside South Africa. Section 72 of POPIA allows this where the recipient is subject to a law, binding corporate rules or a contract that protects the information in a way substantially similar to POPIA, or where you have consented, or where the transfer is needed for a contract with you.
HubSpot stores our records in the European Union under the GDPR. The United States providers above are bound by their standard data processing terms, which include the European Commission's standard contractual clauses. Where a tag runs only on your consent, that consent also covers the transfer it causes.
Cookies
Cookies are small files a site stores in your browser. We group ours as necessary, analytics or marketing. Only necessary cookies are set before you choose. The names and durations below are what each vendor documents and may change when a vendor updates its software.
| Name | Purpose | Type | Duration |
|---|---|---|---|
li_consent | Stores your cookie choices (analytics yes or no, marketing yes or no, and when you chose). Kept in your browser's local storage so we do not ask again. | Necessary | Until you clear it or change your choice |
__cf_bm | Cloudflare bot protection. May be set while the site is served. | Necessary | 30 minutes |
_ga | Google Analytics. Tells one visitor from another. | Analytics | 2 years |
_ga_* | Google Analytics. Keeps the current session state. | Analytics | 2 years |
_clck, _clsk | Microsoft Clarity. Visitor and session identifiers for recordings and heatmaps. | Analytics | 1 year, 1 day |
CLID, MUID | Microsoft Clarity. Identifies the browser across Microsoft services. | Analytics | 1 year |
_gcl_au | Google Ads. Links a conversion to the ad click that led to it. | Marketing | 3 months |
_fbp, _fbc | Meta Pixel. Browser identifier and the click identifier from a Meta ad. | Marketing | 3 months |
li_sugr, bcookie, lidc, UserMatchHistory | LinkedIn Insight Tag. Browser identifiers and ad measurement. | Marketing | 3 months, 1 year, 1 day, 30 days |
hubspotutk, __hstc, __hssc, __hssrc | HubSpot tracking. Links your visits to your contact record once you send a form. | Marketing | 6 months, 6 months, 30 minutes, session |
Calendly sets its own cookies on calendly.com when you open a booking. They are governed by Calendly's policy, not ours.
Consent and how to change it
On your first visit a banner offers three choices: accept all, only necessary, or cookie settings. Nothing beyond necessary runs until you choose. Your choice is kept in li_consent and sent to Google Consent Mode, which keeps the Google tags in line with it.
To change your mind, click Cookie settings in the footer of any page. Withdrawing consent stops new tracking from that point. It does not delete what a vendor already holds, but you can ask us to arrange that under Your rights.
You can also block or delete cookies in your browser settings. The site still works without them.
How long we keep it
- Enquiries and leads. Kept while the enquiry is open and for 24 months after our last contact with you, then deleted from HubSpot.
- Customers. Kept for the life of the subscription agreement and as long as tax and company law require afterwards.
- Analytics. Google Analytics keeps user-level data for 14 months. Other vendors keep data for their documented defaults.
- Hosting logs. Cloudflare keeps request logs for a short period measured in days.
- Email. Kept while the conversation is live, then deleted on the same 24-month cycle as leads.
Security
The site is served over HTTPS. Form submissions travel over HTTPS to a Cloudflare Worker and then to HubSpot, and are not stored on the website itself. Access to HubSpot is limited to the people who handle sales and support, each with their own login and two-factor authentication. We review who has access when someone joins or leaves.
If we learn of a breach that affects your personal information, we will notify you and the Information Regulator as section 22 of POPIA requires.
Your rights
Under POPIA you may:
- ask whether we hold personal information about you, and ask for a copy (access),
- ask us to correct or update it (correction),
- ask us to delete it where we no longer have a reason to keep it (deletion),
- object to processing based on legitimate interest, and object to direct marketing at any time (objection),
- withdraw consent at any time, without affecting what was done before,
- complain to the Information Regulator.
To exercise a right, email donovan@lightindustrial.co.za with "POPIA request" in the subject. We may ask you to confirm your identity. We respond within 30 days. Access requests may be made on the Regulator's Form 2 under the Promotion of Access to Information Act, but a plain email is enough for us.
Complaints to the Information Regulator
If you are not happy with how we handle your information, or with our answer to a request, you can complain to the Information Regulator (South Africa).
Website: inforegulator.org.za
Complaints email: complaints.IR@justice.gov.za
General enquiries: enquiries@inforegulator.org.za
Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001.
Children
This site is for businesses. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us information, email us and we will delete it.
Changes to this policy
We update this page when our processors, cookies or practices change. The date at the top shows the current version. A material change will be flagged on this page for 30 days. Continuing to use the site after a change means the new version applies.