Policy centre
Clear policies, without hiding the important details.
This page explains how Crestwell handles personal information, how website projects and payments work, the difference between the fixed 12-month payment option and post-year month-to-month care, and how to make a POPIA request.
Draft updated: 22 August 2026
This operational draft requires South African legal review before publication, including the fixed term, post-year care, cancellation, suspension, ownership, handover, privacy and PAIA wording.
Privacy
How Crestwell handles personal information
Crestwell collects and uses personal information needed to respond to enquiries, quote and deliver website work, manage hosting and care, provide support, keep business records and operate this website.
Information Crestwell may collect
- Your name, phone number, email address, business name and preferred contact method.
- Information you send about the business, services, service areas, current website and project goals.
- Supplied copy, logos, images, testimonials, credentials and other project material.
- Messages, approvals, support requests, invoices and payment records.
- Technical website data such as pages visited, device and browser information, referral source, approximate location, analytics events and IP address, where the site and configured tools collect it.
How Crestwell may use it
- To answer an enquiry and confirm whether the core website scope fits.
- To prepare a quote, agreement, invoice or project plan.
- To research, plan, write, design, build, test, launch, host and care for a website.
- To manage approvals, payments, support, security and business records.
- To understand and improve Crestwell's own website, where lawful analytics are configured.
- To send direct marketing only where permitted, with an opt-out where required.
Contact channels and WhatsApp form
Crestwell's website provides direct phone, WhatsApp and email links, plus a WhatsApp enquiry form. The form builds the message in your browser and opens WhatsApp; the details are not stored or sent to a Crestwell website server. Once WhatsApp opens, the information is handled by the communications provider under its terms and privacy practices.
Cookies, analytics and media
This website may use essential storage, analytics, security tools or hosted media. These tools may process technical usage data so the site can work, remain secure and show Crestwell which content is useful. Visitors can use browser settings to control available cookie options.
Sharing and service providers
Crestwell may use reputable providers for website hosting, deployment, domain and DNS administration, email, communications, analytics, project management, file storage, invoicing, security and support. Crestwell does not sell personal information. Some providers may process information outside South Africa; Crestwell should use reasonable safeguards where applicable.
Security and retention
Crestwell uses reasonable technical and organisational measures to protect information and limits access to what is needed. No online service can promise absolute security. Records are kept only as long as needed for enquiries, project delivery, support, care, accounting, legal duties, disputes or reasonable business administration.
Website and engagement terms
Using this website and working with Crestwell
This website gives general information about Crestwell's services and standard commercial model. A project begins only after the required written acceptance and payment steps. The accepted quote, invoice, statement of work or service agreement records the committed scope and terms for that client.
Website information
- Public service, scope, price and availability information may change for future enquiries.
- A change to this website does not rewrite an already accepted quote or signed agreement.
- The accepted client documents take precedence if public wording and committed project terms differ.
- Website content is general information and is not legal, tax, accounting or financial advice.
- Visuals, motion and interface examples are illustrative unless Crestwell identifies them as verified client work.
- Crestwell does not guarantee rankings, traffic, enquiries, sales or revenue.
Starting a project
A project starts after Crestwell and the client accept the written scope and the required upfront payment or first payment has been received. The accepted documents should record the page count, agreed service pages, revision limit, deliverables, payment dates, contact route, care limits, exclusions and expected responsibilities.
Client responsibilities
Clients must provide accurate information, timely feedback, approvals, supplied content and required access. Clients must have the right to use logos, images, testimonials, copy, credentials and other material they provide. The client remains responsible for the legal and factual accuracy of its business claims, regulated wording, credentials, prices and industry-specific statements.
Scope changes and third-party costs
Additional pages, major rewrites, a new design direction, added integrations, urgent work, paid assets, software or other work outside the accepted scope may require a separate written quote. Third-party costs already committed may be non-refundable where the provider does not offer a refund. The accepted client agreement must govern any cancellation charge or payment obligation.
Payment routes
One website, with two ways to pay
R2,499 once-off route
The once-off price is R2,499, paid by EFT. Fifty percent is due before work starts. The remaining 50% is due after launch. The first 12 months of hosting and website care are included.
R349 monthly route
The monthly price is R349 by EFT for a fixed initial term of 12 months. It is not a cancellable month-to-month care plan during that initial term. It includes the same core website scope and the same first 12 months of hosting and website care as the once-off route.
EFT and due dates
Quotes, invoices and agreements should state each due date and payment reference. Crestwell banking details must be supplied through a verified Crestwell channel. A visitor should not rely on banking details forwarded by an unverified third party.
Overdue monthly payments
Any right to suspend a monthly client's live website for overdue payments must be stated in the signed agreement and applied only after documented written notice and FJ approval. A suspension must be reversible and must not involve deleting the website, domain or client files.
Hosting and website care
First-year care and post-year care are separate.
First 12 months
Both payment routes include the first 12 months of hosting and website care. The accepted agreement records the practical limits. Care may include hosting management, domain-renewal administration, website-related SSL and DNS monitoring, technical-health oversight, website support and reasonable minor changes.
After month 12
After the first 12 months, hosting and website care continue at R99 per month by EFT on a month-to-month basis. This post-year service is separate from the fixed initial 12-month R349 website payment term.
The accepted agreement should record the notice needed to end post-year care, when cancellation takes effect, which costs remain due and how domain or website handover will be completed.
Care exclusions
Website care does not include unlimited changes, new pages or systems, redesigns, email hosting, mailbox administration, email migration, general IT support, advertising, photography or other work outside the agreed website scope.
Ownership and handover
File handover depends on the payment option.
Crestwell's existing systems
Unless the accepted agreement says otherwise, Crestwell keeps ownership of its pre-existing systems, reusable code, internal tools, methods and know-how. Client-supplied material remains subject to the client's rights and permissions.
Once-off route
After required payments are settled, the client receives the agreed rights to use the completed website and the handover described in the accepted agreement.
Monthly route
A monthly-package client receives the agreed website package files after completing the fixed initial 12-month term and settling all required payments. The signed agreement should define the file package, included handover information and any third-party account or licence limits.
Domain and service exit
Crestwell supports the agreed domain transfer and website handover if the client ends care or requests a move, subject to the accepted payment and handover terms. Crestwell does not hold or manage client email mailboxes as part of the website service. Website-related DNS changes must protect existing email records.
Limitations
A strong website helps, but results depend on the wider business.
Crestwell commits to the agreed work and quality-control process, not to a guaranteed commercial outcome. Search rankings, traffic, enquiries, sales and revenue can be affected by competition, market demand, business operations, pricing, reputation, advertising, search-platform changes and other factors outside Crestwell's control.
The final agreement should contain provisions for liability, service availability, third-party platforms, force majeure, disputes and governing law.
POPIA requests
Ask Crestwell about your personal information
Crestwell aims to handle personal information in line with the Protection of Personal Information Act, 2013. Subject to applicable law, a person may ask Crestwell to:
- Confirm whether Crestwell holds personal information about them.
- Provide access where access is lawful and required.
- Correct or update inaccurate personal information.
- Delete information where deletion is lawful and does not conflict with record-keeping duties.
- Object to certain processing where the law allows.
- Withdraw consent where processing relies on consent.
- Opt out of direct marketing.
How to submit a request
Email privacy@crestwellsystems.com with the subject line POPIA Request. Include your full name, contact details, the type of request and enough information to identify the relevant record. Crestwell may need to verify your identity before acting.
PAIA and complaints
A formal access-to-records request may require more information, proof of the right being exercised and a lawful fee. A request may be refused where the law allows. If a privacy concern is not resolved, the requester may contact South Africa's Information Regulator.
Policy contact
Send privacy and policy questions here.
For a privacy request, policy question or legal notice, email privacy@crestwellsystems.com. For website enquiries, use enquiries@crestwellsystems.com. Existing client website support goes to support@crestwellsystems.com.
Email the privacy address