Privacy notice
Last updated: 20 October 2026
Who we are
Sill (sill.co.za) is run by Lefty23 (Pty) Ltd, a private company, registration number 2026/706220/07, based in Cape Town, South Africa. Under the Protection of Personal Information Act (POPIA) we are the "responsible party" for the details you give us here. Our postal address is available on request from [email protected].
Information Officer: the Information Officer, Lefty23 (Pty) Ltd, [email protected]. We are registered with the Information Regulator under number 2026-066332.
What Sill does
You choose curtains or blinds and tell us about your windows. If you send a request, Sill receives it and passes it to one local installer who serves your area. The installer contacts you to measure and quote. Sill does not sell or fit anything.
What we collect, and why
You choose each item. We collect only what is listed here.
| What | Why | Do you have to give it? |
|---|---|---|
| Your suburb or town | To find the installer who covers you | Yes. Without it we cannot find an installer. |
| What you want: curtains or blinds, the style, the window type, the layers, the colour family | So the installer knows what to quote for | Yes, it is the request itself. |
| A rough size for each window, or "my installer measures" | So the installer can prepare | Yes, or choose "my installer measures". |
| Your windows in your own words, if you choose to describe them instead of choosing on the picture | So the installer knows what to quote for | Yes, on that path. |
| Photos of your windows, if you add them (up to 5). Before they leave your phone or computer, the page makes them smaller and removes any location and camera details stored in them | So the installer can see the window and prepare | No. |
| Your name | So the installer knows who to ask for | Yes. |
| Your WhatsApp or phone number, and whether you prefer WhatsApp or a call | So the installer can reach you the way you prefer | The number, yes: without it the request cannot be sent. The preference, no. |
| Home or business | Business premises are arranged differently | No. |
| The date you need it by, other windows, a note | So the installer can quote accurately | No. Leave them blank if you like. |
| Your answers to "Help me choose" (for example dark rooms, privacy, easy to keep free of dust, small children in the home) | To adjust the advice we show you. They stay in your browser, unless a suggestion you keep adds a note to your request, which then goes to the installer | No. |
| Your email address, if you ask for a copy of your request | To send you a copy of what you sent and its reference, once. Nothing else is sent to it | No. |
| Your email address, only if we do not cover your suburb yet and you ask us to tell you, with whether it is a home or business | To tell you when an installer covers your suburb | No. |
We do not collect your ID number, bank details, or your street address. If you give your street address to the installer, that is between you and the installer. If you write something private in a note anyway, we use it only to pass on your request, and it is deleted with your words.
We keep a record of each request: its reference number, when it was sent, the installer it went to, your suburb and your choices and sizes. It holds no name, number, email address or words of yours. We use it to deal with complaints and to bill the installer.
With your request we also record the first page of the site you opened and the site that sent you to us (for example a search engine), never your search words, so we can see which pages help people. We also send the time you took to fill in the form, in seconds, to help spot requests sent by automated programs.
We also receive technical details when you visit: your IP address, browser type, and the pages you ask for. These are used to keep the site working and safe. When you send a request, or press Next on the first screen (which sends your words for a read-back), a coded form of your IP address is kept with it, to stop misuse of the form.
The basis for each use (POPIA section 11): passing your request on, because you ask us to and agree by pressing Send; the read-back, because it is a step you ask us to take, by pressing Next on the first screen, to prepare your request; the record, the coded IP address and the technical details, our legitimate interest in billing, in dealing with complaints and in keeping the site safe; the waiting list and the copy, your consent. You may object to a use based on our legitimate interest at any time.
Who gets your details
Sill, then one installer. When you press Send, your request comes to Sill. We pass it to one local installer who serves your area. Where an installer has signed with Sill for your suburb, we show you their name and visit fee before you send; where we pass requests on ourselves, we tell you that before you send, and the installer who will contact you is named when they do. We do not give your request to anyone else, to other installers or for marketing. The installer who receives it may pay Sill a fee for it; that is how Sill is paid, and you pay Sill nothing.
Once the installer has your request, the installer decides what to do with it for their own business. Every installer agrees to Sill's installer terms, in writing, before it receives any request. Those terms require the installer to use your details only to answer your request and carry out any contract you make with them, to keep them secure, not to pass them on, and not to use them for marketing unless you separately agree. If you want the installer to delete your details, ask the installer. You may also ask us, and we will pass the request on.
Companies that work for us. They handle your details only on our instructions, under written terms that require them to keep the details secure:
- Cloudflare, Inc. (United States and the European Economic Area, with a global network): runs the website, our email addresses and the form that receives your request, runs the Turnstile spam check, and holds backups of our request system.
- Hetzner Online GmbH (servers in Finland): runs our request system, where your request and any photos are kept as described below, and our visit counter.
- Resend, Inc. (United States): sends emails for us, including your request to the installer and any copy you ask for.
- Google (United States): our mailbox. It receives the messages you send us. Our notice of each new request carries only its reference number.
- TypeSafe AI, Inc. (United States): checks your description of your windows for spam. It receives your words only, never your name, number or email address, and with any email address or long number in them removed first. It does not use them to train AI.
- Anthropic PBC (United States): when you press Next on the first screen, its Claude model reads the same cleaned words to draft your list of windows for you to check. Anthropic deletes them within 30 days, unless the law or its usage rules require longer, and may not use them to train AI.
We do not keep the spam check or the draft. The windows a draft listed, never your words, are kept for at most 24 hours, so that we can count how many lines you changed; after that we keep only those counts.
Photos you add are kept encrypted in our request system and deleted after 14 days. They are never copied into our backups. The installer is sent links to them that stop working by then, not copies.
Outside South Africa. These companies keep information on servers outside South Africa: in the United States, in Finland and elsewhere in the European Economic Area, and on Cloudflare's global network. We send it there only to do what you ask of us, and only to companies bound by written terms to protect it.
We may also give your details to a court or authority if the law requires it.
How long we keep it
- Your name, number, any email address, your photos and your own words (the window descriptions and notes): in our request system, encrypted, for 14 days, so that we can pass your request on and deal with any problem with it; then deleted. The notices our mailbox receives about new requests carry only the reference number, never your details, and are deleted after 12 months.
- The coded form of your IP address: 30 days.
- The record of your request, without your name, number or words: 12 months, then reduced to a count with no names, for example "3 curtain requests from Claremont in March."
- Waiting list (where we have no installer for your suburb yet): only your email address, suburb, and whether it is a home or business. They are kept in our request system, not in our mailbox. We use them once, to tell you when an installer covers your suburb, and delete them within 30 days of that message, at once if you ask, and in any case 12 months after you signed up.
- A request we could not accept: if we can't accept a request, we keep a short note of why, so we can fix the form: the reason (for example a phone number we couldn't use), the area you chose, and the shape of the number (such as '0, 10 digits'), never the number itself. If an email address can't receive mail, we keep only the part after the @ (for example 'gmial.com'), and delete it after 30 days. We never keep your name, number, email address or message for a refused request. Daily counts of refusals, with nothing about you, are kept for 12 months.
- Messages you send us: as long as needed to answer you, and at most 12 months after the matter is closed.
- Bills to installers, which show a reference number and date: 7 years, because company and tax law ask for it. They do not contain your name or number.
The installer keeps their copy for their own period.
Your rights
You may:
- ask what details we hold about you
- ask us to correct them
- ask us to delete them
- object to our using them
- withdraw a consent you gave. Withdrawing does not undo what already happened. Details already sent to an installer are with the installer.
Write to [email protected]. Any written message will do; you do not need a special form. Give the name, suburb and phone number you used, so that we can find the request. We answer in writing within 30 days. We do not charge to confirm what we hold, or to correct or delete it.
If you are not happy
Write to us first. If we do not sort it out, you may complain to the Information Regulator (South Africa):
- Website: inforegulator.org.za
- Complaints: made through the Regulator's online eService Portal, after you register a profile there (inforegulator.org.za/complaints/)
- Email: [email protected] (general enquiries)
- Phone: 010 023 5200, or toll free 0800 017 160
- Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
Cookies and analytics
This site sets no cookies of its own, and its own code stores nothing in your browser: while you choose, your answers are kept in the page only, so that Back and Forward work. We count visits to our pages, and how far visitors get through the quote, with Umami, a counting tool that sets no cookies and does not identify you. It records the page, the step reached and the area chosen, and, where a step is turned away, the kind of reason (for example a suburb we do not cover, or a check that failed); never what you type. The counts are kept on our own server with Hetzner in Finland. Our hosting company, Cloudflare, may set a cookie that is strictly needed for security. From when you first click into the box where you describe your windows, on the screen where you check and send your request, and on the waiting-list form, a Cloudflare check called Turnstile runs in the page to tell people from automated spam; Cloudflare receives technical details about your browser for that check only.
Changes
If this notice changes, we change the date at the top.
If you are an installer
Sill (sill.co.za) is run by Lefty23 (Pty) Ltd, registration number 2026/706220/07. We are the "responsible party" under the Protection of Personal Information Act (POPIA) for the details about you described here. Our postal address is available on request from [email protected]. Information Officer: the Information Officer, Lefty23 (Pty) Ltd, [email protected]. We are registered with the Information Regulator under number 2026-066332.
Where we get your details
- Public sources. Your business's own website and public business listings. We use only details you or your business have published for contacting the business, such as the business name, a business email address, a business phone number, the areas you cover and what you fit. We do not use social media profiles or private numbers.
- From you. When you write to [email protected], reply to our email, or agree to our installer terms.
Why we use them, and on what basis
| What | Why | Basis |
|---|---|---|
| Business name, business email address, contact name if you gave it, source (the website address), the date we wrote | To ask you once whether you would like to receive enquiries from Sill, as POPIA section 69 and the Information Regulator's Form 4 require | Our legitimate interest in asking once, and your reply |
| Your reply (the email with its headers) | To keep proof of your consent, or of your refusal | Legal obligation to prove consent; legitimate interest |
| Business name, contact name, email, phone, areas, products, visit fee, and the "I agree" reply | To send you enquiries and to run the agreement | Contract with you |
| Invoices and payments: reference numbers, dates, amounts, your bank payments to us | To bill you, be paid, and settle disputes | Contract; legal obligation (company and tax law) |
| Your emails to us about enquiries or claims | To deal with them | Contract; legitimate interest |
Our approach to you is one email, asking permission. We write to you only once to ask. Silence means no. We send no tracking pixel and no tracked links.
Who sees them
Only Sill. We do not sell your details, and we do not pass them to anyone else for their own marketing. Your business name, visit fee and the contact details you give for enquiries are given to the homeowner when an enquiry is passed to you, so they can reach you. Companies that work for us under written agreements handle the emails and records: Cloudflare (United States and the European Economic Area, global network), Resend (United States), Hetzner (servers in Finland) and Google, our mailbox (United States). Each keeps your details secure under its written data processing terms. We transfer your details abroad for no other reason.
How long we keep them
- You said no, did not reply, or your email bounced: we keep only your business name, email address and the date, so that we never ask you again. Everything else about you is deleted within 90 days. We keep the minimum for as long as we do outreach.
- You said yes: your details and your reply are kept while you work with Sill, and your agreement and invoices for 7 years afterwards, because company and tax law ask for it. Other details are deleted within 12 months of the agreement ending.
- A prospect we never contact: deleted when we decide not to approach you, and in any case within 12 months.
Your rights
You may at any time ask us to confirm what we hold about you, to correct it, to delete it, or to stop using it, and you may object to our use of it or withdraw your consent. Write to [email protected]. Any written message will do, and there is no charge. We answer in writing within 30 days. If you ask us not to write again, we keep your email address on a list to make sure we do not.
You do not have to give us your details, and your choice not to will not count against you. Without them, we cannot send you enquiries.
Complaints
If you are unhappy, please write to us first. You may also complain to the Information Regulator: through the eService Portal at inforegulator.org.za/complaints/; [email protected]; 010 023 5200 or toll free 0800 017 160; Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191.