Your Privacy Matters to Us
Cityhub Tech & Design Pty Ltd ("Cityhub Tech & Design", "Cityhub", "the Company", "we", "us" or "our") respects your privacy and is committed to protecting the personal information of everyone who visits our website www.cityhubtd.com (the "Website"), submits an enquiry, engages our design, printing, merchandise or ICT services, or uses our Website Management Portal or hosting services (collectively, the "Services").
This Privacy Policy explains what personal information we collect, why we collect it, how we use, store and share it, and the rights you have in relation to your information. It applies to all visitors, enquirers, clients and Portal users, and should be read together with our Terms of Service.
Cityhub Tech & Design Pty Ltd, based in Maseru, Lesotho, is the data controller responsible for the personal information described in this Policy. For any privacy-related question or request, you may contact us at:
We collect information in the following categories, depending on how you interact with us:
We collect personal information directly from you when you complete a form on the Website, send us an email, message us on WhatsApp, call our office, meet with our team, sign a quotation or agreement, or register for access to the Portal. We also collect certain technical information automatically through cookies and analytics tools when you browse the Website, as described in Section 8 below.
We use the personal information we collect to:
We process your personal information on one or more of the following legal bases: performance of a contract with you (for example, to deliver a service you have ordered); your consent (for example, for marketing communications or non-essential cookies, which you may withdraw at any time); our legitimate business interests (such as improving our Services, preventing fraud, and maintaining business records), provided these interests do not override your fundamental rights; and compliance with a legal obligation to which we are subject.
The Website uses cookies and similar technologies, including Google Analytics, to understand website traffic and usage patterns, and may use embedded content such as Google Maps and WhatsApp click-to-chat links, which may set their own cookies or collect data according to their own privacy practices. Where the Portal is used, session cookies may be used to keep you securely logged in. You can control or disable cookies through your browser settings; please note that disabling certain cookies may affect the functionality of the Website or Portal.
We do not sell your personal information. We may share personal information with the following categories of recipients, strictly as necessary to provide our Services:
These third parties are only provided with the information necessary to perform their function and are expected to handle it securely and in accordance with applicable law.
Some of our service providers and suppliers (for example, certain hosting infrastructure, cloud-based analytics tools, or regional material suppliers) may be located outside Lesotho, including in South Africa or other jurisdictions. Where personal information is transferred internationally, we take reasonable steps to ensure it continues to receive an appropriate level of protection, consistent with the requirements of Lesotho's Data Protection Act, 2011.
We implement reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure or destruction, including secure hosting infrastructure, access controls for the Portal and cPanel accounts, and restricted internal access to client records. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.
We retain personal information for as long as necessary to fulfil the purposes described in this Policy, including the duration of any ongoing service or hosting arrangement, any applicable warranty or support period, and thereafter for as long as required to comply with our legal, tax and accounting obligations or to resolve disputes. Project files and Content may be retained for a reasonable period after project completion to support portfolio use, repeat orders and warranty claims, unless you request earlier deletion.
If you are issued login credentials for the Website Management Portal, Advanced Management Dashboard, or a cPanel hosting account, we process the account information, activity logs and any Content you manage through those systems solely to provide the hosting and content-management functionality described in your service package. You are responsible for the accuracy of information entered into these systems and for keeping your access credentials confidential.
Subject to applicable law, including Lesotho's Data Protection Act, 2011, you have the right to:
To exercise any of these rights, please contact us using the details in Section 2. We will respond within a reasonable timeframe. You may also have the right to lodge a complaint with Lesotho's Data Protection Commission once established, or with another applicable supervisory authority.
Where you have consented to receive marketing communications (such as service updates, promotions or newsletters) by email or WhatsApp, you may opt out at any time by contacting us directly or using the unsubscribe option provided in the communication. We will continue to send you essential service-related communications (such as invoices or project updates) even if you opt out of marketing.
Our Website and Services are intended for businesses, organisations and adult individuals. We do not knowingly collect personal information from children under the age of 18. If we become aware that we have inadvertently collected personal information from a child without appropriate consent, we will take reasonable steps to delete it.
In the event of a data breach that poses a real risk of harm to affected individuals, we will take reasonable steps to investigate the incident, mitigate any harm, and notify affected individuals and, where required by law, the relevant regulatory authority, without undue delay.
The Website may contain links to third-party websites, such as our social media pages or supplier sites. We are not responsible for the privacy practices or content of those external websites, and we encourage you to review their privacy policies separately.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or Services. The updated Policy will be posted on the Website with a revised effective date. We encourage you to review this Policy periodically.
This Privacy Policy is governed by the laws of the Kingdom of Lesotho, including the Data Protection Act, 2011, and any dispute relating to it shall be subject to the exclusive jurisdiction of the courts of Lesotho.
If you have questions, concerns or requests regarding this Privacy Policy or how your personal information is handled, please contact us: