Every enquiry form collects personal information, so POPIA applies to your website. The rules are sensible and mostly come down to being honest and careful.

Collect only what you need

Ask for the details you need to reply and no more. A name, an email and a message are enough for most enquiries.

Say what you do with it

Link to a privacy notice near the form. It should say who you are, why you collect the details, who else sees them and how long you keep them.

Keep it safe

Protect what you collect.

  • Use HTTPS on every page with a form
  • Limit who can read submissions
  • Do not email sensitive details in plain text
  • Delete old enquiries on a schedule
  • Tell people how to ask for their details to be removed