Effective Date: July 7, 2026
1. Introduction
Welcome to eHawu Security, developed and maintained by eHawu / Olorun Cloud. We are committed to protecting your privacy and ensuring the security of your digital footprint. This Privacy Policy explains how our application, eHawu Security, operates, what information we handle, and how we safeguard your data.
Who we are, and who looks after your information
Electronic Hawu (Pty) Ltd (reg 2025/396818/07, 4 Sitar Place, Raslouw Manor, Centurion, Gauteng, 0157) is the responsible party for the personal information we process under the Protection of Personal Information Act (POPIA). Our Information Officer is Menzi Mfundlo Hlope and can be reached at privacy@ehawu.africa.
What we collect and why it is lawful (POPIA s11 + s18)
At each point where you give us information, we collect only what the service needs, and we process it on one of these lawful bases:
| We collect | For | Lawful basis |
|---|---|---|
| Name, email, billing address, phone (checkout) | Delivering and invoicing your subscription | Contract — s11(1)(b) |
| Account/telemetry data of the service itself | Running secure mail, VPN and the SOC | Contract + legitimate interest — s11(1)(b)/(f) |
| Contact-form enquiries | Answering you | s11(1)(b)/(f) |
| Newsletter subscription | The weekly brief | Consent — s11(1)(a), opt-in, one-click unsubscribe in every message (s69) |
| Server logs | Keeping the platform standing | Legitimate interest — s11(1)(f) |
You have the right to object to processing on legitimate-interest grounds, to access and correct what we hold (POPIA s23–25), and to complain to the Information Regulator of South Africa (inforegulator.org.za). We delete what we no longer need, except where South African law requires records to be kept — tax records for five years (Tax Administration Act s29) and billing records against the three-year prescription period (Prescription Act 68 of 1969).
Where your information lives, and when it leaves South Africa (POPIA s72)
Customer data for eHawu services is resident on South African infrastructure — that is the product, not an accident. Where a piece of the stack necessarily sits abroad, POPIA requires us to tell you and to make sure the recipient is bound to protect the data. All core services run on South African infrastructure. Our payment provider is PayFast (South Africa) and domain registries are South African; where any element sits outside South Africa we will name it here, together with the written contract terms that bind the recipient to protect your data (s72(1)(d)).
If we ever have a breach
If your personal information is accessed or acquired by someone who shouldn’t have it, we notify the Information Regulator and you directly as soon as reasonably possible (POPIA s22), with what happened, what we’re doing, and what you should do. That promise is operational, not decorative — it’s drilled, and this page is the public version of it.
2. Core Functionality and Use of VpnService
eHawu Security is a privacy suite designed to protect your network traffic and block intrusive advertisements. To provide these core features, our application utilizes the Android VpnService API.
– Secure Tunneling: The VpnService is used to create a secure, obfuscated, encrypted device-level tunnel to our servers, protecting your data from interception on public or unsecured networks.
– Ad-Blocking: The service acts as a local traffic filter to identify and drop connections to known ad-tracking and malicious domains before they can load on your device.
3. Strict No-Log Policy
We believe that true privacy means we should not know what you do online. eHawu Security operates under a strict “No-Log” policy. When you connect to our VPN servers, we DO NOT:
– Monitor, record, log, or store your browsing history.
– Log your traffic destinations, DNS queries, or downloaded data.
– Store your original IP address or the specific IP address assigned to you by our servers.
– Sell, share, or monetise any aspect of your network traffic.
4. Data Encryption in Transit
Security is our primary objective. All data transmitted between your device and our VPN endpoints is fully encrypted using industry-standard cryptographic protocols. Your data remains encrypted in transit, ensuring that ISPs, network administrators, and malicious actors cannot intercept or read your traffic.
5. Information We Do Collect
To operate the service effectively, we only collect the absolute minimum data required:
- Account Information: If you create an account, we store your email address and securely hashed password (using bcrypt) solely for authentication and subscription management.
- Service Diagnostics: We may collect strictly anonymised, non-personally identifiable server load and connection stability metrics to maintain network health and ensure uptime.
6. Third-Party Access and Data Sharing
To operate the service effectively, we only collect the absolute minimum data required:
– Account Information: If you create an account, we store your email address and securely hashed password solely for authentication and subscription management.
– Service Diagnostics: We may collect strictly anonymised, non-personally identifiable server load and connection stability metrics to maintain network health and ensure uptime.
7. Your Data Rights
You retain full ownership and control over your personal data. You have the right to request access to, modification of, or the complete deletion of your account and associated email address at any time by contacting our support team.
8. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our software or legal requirements.
Account and Data Deletion Requests
You retain full ownership and control over your personal data. You have the right to request access to, modification of, or the complete deletion of your account and associated email address at any time.
To request account or data deletion, please email support@ehawu.africa or menzi@ehawu.africa with the subject line “Account Deletion Request”. Upon receiving your request, all personal information and account credentials will be permanently erased from our systems within 30 days.
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how eHawu handles your data, please contact us at:
Email: support@ehawu.africa
Website: https://ehawu.africa