Privacy policy · last updated 21 October 2026

Your data, in plain language.

GoMarty Consulting ("we", "us") is an independent consultancy based between South Africa and China. This policy explains what we collect when you use gomarty.net — the free scan, the paid website audits, client accounts, and our one-page website service — why we collect it, and how to get rid of it. We comply with South Africa's Protection of Personal Information Act (POPIA).

What we collect

• Account details — your name, business name, and email address. If you sign in with Google, we receive your name and email address from Google; we never see your Google password.
• Phone number — only if you choose to add it to your profile, your website brief, or contact us via the WhatsApp buttons on the site.
• Website scan data — the domain names you ask us to scan, and the technical results of those scans (findings, timings, public DNS/certificate information).
• Website brief data — if you request a one-page website: everything you type into the brief (business name, trade, tagline, areas served, hours, contact details, services and prices) plus the photos and logo you upload. This content is used to build your website and will be publicly visible on it — that's the point.
• Consent records — when you accept our Terms of Service and this Privacy Policy (at signup or when submitting a brief), we record that acceptance and its timestamp.
• Payment records — invoices, amounts, dates and payment status, all visible to you on your own dashboard. Card/bank details themselves are handled by our payment processor (PayFast) and never touch our server. For monthly website billing we store only PayFast's subscription reference (a token that lets PayFast debit the card you approved) — again, no card details on our side.
• Prospect information — for businesses we think we can help, we keep publicly available business details (business name, website address if any, public contact details) so we can reach out once and track who we've contacted. If that's you and you'd rather we didn't, one email or WhatsApp removes you permanently.
• Cookies — a session cookie keeps you signed in. We also use Google Analytics 4 on gomarty.net (and on the websites we build) to count visits and see which pages get read; it sets its own cookies and the data is processed by Google under their terms. No advertising cookies, no tracking pixels, no analytics sold to anyone.
• Website visitor analytics — one-page websites we build include Google Analytics 4, operated by us, so we can tell you how many people visit your site and what they look at. Visitors' data is aggregated statistics, not a list of individuals.
• Messages you send us — e.g. via WhatsApp or email.

Why we collect it

• To run website scans and show you the reports in your dashboard.
• To build, host and maintain your one-page website if you order one.
• To contact you about your audit, your website, or services you asked about — including automated service emails like payment reminders for an unpaid website.
• To invoice you and keep payment records as required by law.
• To keep the service secure and prevent abuse of the free scan.

Where your website lives (hosting transparency)

One-page websites we build are hosted on our own infrastructure, either at an address on our domain (yourbusiness.gomarty.net) or on your own domain if you register one and point it at our servers. Your published page, its text and its photos are publicly accessible by design. If you later move away, we migrate or redirect your site and remove the copy on our infrastructure once the move is complete.

Who processes it

• Our infrastructure — servers we rent and operate ourselves. Your data lives in a database only we can access.
• Google — only if you choose "Continue with Google".
• PayFast — processes online payments and monthly card subscriptions; they handle your card/bank details under their own privacy policy.
• Standard business tools — we use hosting, email and productivity tooling to run the service. Only the information needed for each tool's job is involved — never your password.

We do not sell, rent, or share your personal information with advertisers. Ever.

How long we keep it

Account data is kept while your account exists. You can edit your profile or delete your entire account — including all reports and scan history — yourself, at any time, from the danger zone at the bottom of your dashboard. Website briefs and uploaded photos are kept while your website project is active; if a project is cancelled we delete them on request. If your website is frozen or cancelled, we keep a copy of the final site for 90 days so it can be restored, then delete it. Database backups roll off after 14 days, so deleted data disappears from backups within two weeks.

Website scans

Our scanner only looks at information that is publicly visible to any visitor of the scanned website: pages, headers, DNS records, and certificate details. We never attempt to log in, exploit, or bypass any protection.

Your rights

Under POPIA (and GDPR where applicable) you may request access to, correction of, or deletion of your personal information. Most of this is self-service in your dashboard; for anything else, contact us and we'll sort it within 30 days.