Privacy

Who is responsible

Lockhart is a trading name of Lockhart Investments (Pty) Ltd, registration number 2017/196101/07 (“Lockhart”). Lockhart is the responsible party for personal information collected through this website and its own WhatsApp line.

Information Officer: Luke Buckley, luke@lockhart.africa.

What is collected

• What you send through a form: your name, business, email, phone number, website address and message.
• What you send on WhatsApp or by email, and the details you give when you call.
• For the Website Check: the website address you enter and the email the report goes to. The check reads only public information about the website and its domain.

This website sets no advertising or tracking cookies.

Why it is used

• To reply to you and to send what you asked for, such as a Website Check report.
• To prepare a quote, and to deliver and invoice work you have agreed to.
• To keep records that the law requires, such as financial records.

Your information is never sold, and never used to train AI models.

Who it is shared with

Only with service providers that process it on Lockhart’s behalf, under agreements that require them to protect it: email and hosting providers, Formspree (which delivers the website’s forms to Luke’s email, and stores submissions in the United States for 30 days), WhatsApp (Meta) for messages, and, for the assistants, the providers listed under Data and AI below. Some of these providers store information outside South Africa; Lockhart uses only providers whose terms give it adequate protection.

How long it is kept

Only as long as it is needed for the purpose it was collected for, or as long as the law requires. Enquiries that do not become work are deleted on request.

Your rights

You can ask what personal information Lockhart holds about you, ask for it to be corrected or deleted, object to its use, or withdraw your consent. Email luke@lockhart.africa. Requests to delete details are actioned promptly.

If you are not satisfied, you can complain to the Information Regulator at inforegulator.org.za.

Data and AI

This section covers Lockhart’s own automated assistant and the assistants Lockhart builds for clients.

• It says it is automated. Every conversation starts by saying so, and the assistant never pretends to be a person.
• Calls are recorded, and it says so. The missed-call voice agent tells callers the call is recorded so the business can follow up.
• Details are saved only after saying so. Before saving, the assistant says: “I’ll save these details so the team can contact you. You can ask us to delete them at any time.”
• Deletion on request. A request to delete details is logged and actioned.
• Never used to train AI models. Conversations are used to answer and follow up the enquiry, and for nothing else.
• It answers only from an approved file. It never sends a quote, an invoice or a payment request; those stay with the business.
• Who processes it. To generate replies, the text of a conversation is processed by an AI model provider (Anthropic’s Claude API). Messages travel through WhatsApp (Meta) and, for calls, a telephony provider (Twilio). Conversation records are stored in a database service (Supabase) on a hosted server (Railway).
• For client assistants, the client business is the responsible party for its customers’ information and Lockhart acts as its operator.

Security

Access to personal information is limited to the people who need it, over encrypted connections, with accounts protected by strong passwords and two-step sign-in where the provider offers it.

Changes

If this policy changes, the date at the top changes too. Material changes will be noted here.