Privacy Policy

Last updated: 08 October 2026

This Privacy Policy explains how LaMotheo Solution (Pty) Ltd (registration number 2018/528955/07), trading as LaMotheo Solutions, collects, uses, stores and protects personal information in connection with this billing system, in compliance with the Protection of Personal Information Act 4 of 2013 ("POPIA").

1. Information we collect

To create invoices and manage our client relationship, we collect and store: your name or company name, company registration and VAT numbers (where applicable), postal/physical address, phone number, email address, and invoicing/billing history. If you use the client portal, we also store a securely hashed password and the date/time of your last login.

We do not collect or store card numbers, CVV numbers, online banking usernames, or online banking passwords. When you choose to pay online, those details are entered directly on Payfast's or Ozow's own secure payment pages, never on our systems.

2. Why we process your information

• To generate, send, and reconcile invoices and statements;
• To process and confirm payments made via EFT, Payfast, or Ozow;
• To communicate with you about your account, invoices, or services;
• To meet our own legal, tax (including SARS/VAT), and accounting record-keeping obligations;
• To operate the client portal you may choose to use.

3. Sharing your information

We share the minimum information necessary with the following third parties, solely to provide our services to you:

• Payfast (Pty) Ltd — to process card and instant EFT payments. See Payfast's Privacy Policy.
• Ozow (Pty) Ltd — to process instant EFT payments. See Ozow's Privacy Policy.

We do not sell or rent your personal information to any third party, and do not share it for marketing purposes without your consent.

4. How we protect your information

Passwords (both admin and client portal) are stored using one-way cryptographic hashing and are never stored or visible in plain text. Access to invoice and client records requires an authenticated login. Public invoice links use a long, unguessable random token rather than a simple sequential number, so one client cannot access another client's invoice.

5. How long we keep your information

We retain invoicing and billing records for as long as required by South African tax and companies legislation (generally a minimum of 5 years), and for as long as you remain a client thereafter for ongoing service and support purposes.

6. Your rights under POPIA

You have the right to request access to the personal information we hold about you, request that we correct or update it, and request that we delete it (subject to our legal obligation to retain financial records for the required statutory period). To exercise any of these rights, contact our Information Officer.

7. Information Officer / contact us

For any privacy-related questions or requests, contact our Information Officer at info@lamotheo.co.za.

If you believe your POPIA rights have been infringed and we have not resolved your concern satisfactorily, you may lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za).

8. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available on this page.