Skip to content
LPG Sense
Legal

Privacy policy

How personal information is collected, used and protected.

Last updated: 29 August 2026

This is our notice under section 18 of the Protection of Personal Information Act 4 of 2013 (POPIA). It covers lpg.africa, the emails you send us, and the LPG Sense mobile app for iOS and Android. What the app collects, and how to delete it, is set out under the LPG Sense app below.

Who is responsible

LPG Africa (Pty) Ltd, trading as LPG Sense (registration number 2026/573057/07), based in Pretoria, Gauteng, South Africa is the responsible party for the personal information described here.

What we collect

  • If you ask us to tell you when the sensor launches: your email address, and your name if you sign your email.
  • If you contact us: your name, your email address, and whatever you choose to put in the message.
  • If you place an order (once orders open): your first and last name, email address, mobile number and delivery address — street, suburb, city, province and postal code — plus what you bought, what you paid, your order number and its status.
  • Technical information the site needs to run: ordinary web-server logs (including your IP address, the pages requested and your browser type), and your IP address held briefly to rate-limit the order form so it cannot be abused by bots. Our checkout also carries a hidden field that must stay empty — a standard anti-spam trick. It collects nothing about you.
  • Things stored in your browser, not by us: your cart and your light-or-dark preference. See our cookie notice.
  • If you use the LPG Sense app: your mobile number, and the cylinder information the app syncs to your account. See the LPG Sense app below.

We collect all of it from you directly. We do not buy contact details, scrape them, or obtain them from anyone else. We do not collect health, religious, political, biometric, race or trade-union information, and we do not knowingly collect information about children.

We take no payments today, so we hold no payment information at all. When card payments go live, your card details will go straight to our payment provider on its own systems and we will still never see or store your card number.

The LPG Sense app

The app signs you in with your mobile number. We send a one-time code by SMS to confirm the number is yours; the number becomes your account name. We do not ask for a password, an email address or your real name.

Once you are signed in, the app keeps your cylinder setup in your account so it follows you between your phone, your tablet and the home-screen widget. That means the following does leave your phone and is stored on our systems:

  • The name and room you give each cylinder, and the cylinder size you pick.
  • The identifier and advertised name of the sensor paired to each cylinder, so the app can find that sensor again — including on your other devices.
  • Your gas-level readings over time: the level, the mass in kilograms, and when each reading was taken. This is what produces the usage history and the days-remaining estimate.
  • Your alert settings for each cylinder.

We use it to run the app for you and nothing else. We do not sell it, we do not use it to advertise to you, and we do not profile you with it. The app contains no advertising and no third-party analytics or tracking.

It is stored in Google Firebase (Firebase Authentication and Cloud Firestore), on Google Cloud infrastructure — see information that leaves South Africa below. Each account can only read and write its own data.

Bluetooth is used only to talk to your sensor. The app does not use Bluetooth or any other signal to work out where you are, and it does not collect your location. On Android the Bluetooth scanning permission is declared with the neverForLocation flag for exactly this reason.

Deleting your app account. You can delete it yourself in the app under Settings → Delete account. That removes your sign-in and every cylinder and reading attached to it. It is immediate and cannot be undone. If you would rather we did it, email support@lpg.africa from the number's associated address or with enough detail to identify the account, and see deleting your account for the full route.

Why we collect it, and on what legal basis

  • To take, deliver and support your order — because we need to in order to perform our contract with you.
  • To answer your question, or to send you the one launch message you asked for — because you asked us to.
  • To keep tax and accounting records — because the law requires it.
  • To keep the site working and secure, including rate-limiting and fraud prevention — our legitimate interest in keeping the site available and secure.

We do not use your information for anything else without asking you first. We do not sell personal information, ever, and we do not hand it to anyone else for their own marketing.

Is giving it to us voluntary?

Yes — it is entirely voluntary. But some of it is genuinely needed for a specific job. We cannot deliver an order without a delivery address and a contact number for the courier, we cannot email you at launch without an email address, and we cannot answer a question without a reply address. Fields marked as required on the checkout are the ones we cannot complete an order without.

If you leave something out, the only consequence is that we cannot do that particular thing for you.

Does any law force you to give it to us? No. But once you have bought from us, tax and company law requires us to keep records of that sale for a set period — so we may have to keep some of your order information even if you later ask us to delete it. If that happens we will tell you, and delete everything we are not required to keep.

Who else sees it

We use a small number of services to run the shop. Every one of them is bound by data-processing terms that require it to use your information only to do the specific job we have asked it to do, to keep it confidential, not to use it for its own purposes, and to tell us promptly if it may have been accessed by someone who should not have it. POPIA requires that to be in writing, and we do not give personal information to a service that will not agree to it.

  • Google Cloud and Firebase — hosting, the order database and the server logs.
  • Resend — sends your order confirmation and our internal order notification. Because those emails contain the delivery details, Resend handles your name, address and phone number, not just your email address.
  • Google Places — the optional address lookup at checkout. If you use it, the address you are typing goes to Google from your own browser so it can suggest matches. You can ignore the suggestions and type your address manually instead.
  • Zoho Mail — hosts our support, orders and info mailboxes, so it holds the emails you send us and the internal order notifications we send ourselves.
  • Aramex — gets your name, delivery address and phone number so it can actually deliver the parcel and contact you about it.
  • Our payment provider — handles the card payment. It receives your payment details directly; we receive only the result.

We may also disclose information where the law requires it, or to protect our legal rights. We will not do so quietly if we are permitted to tell you.

Information that leaves South Africa

Some of those services store or process information outside South Africa, mainly in the United States and the European Union: Google Cloud and Firebase, Google Places, Resend and Zoho.

We rely on their written data-processing terms, which hold them to protection substantially similar to what POPIA requires — including limits on passing your information on to anyone else. That is the ground in section 72(1)(a) of POPIA. We deliberately do not rely on your consent for this: your ability to buy a gas sensor should not depend on agreeing to an offshore transfer. Ask us at info@lpg.africa and we will tell you the current list and which agreement covers which service.

How long we keep it

  • Launch sign-ups: until you unsubscribe, or shortly after we have sent the launch message if you have not asked for anything more. Then we delete it.
  • Support correspondence: 2 years, so we can pick up a thread about a warranty claim.
  • Order and delivery records: 5 years, which is what tax and company law requires, and it is also what lets us honour the warranty and identify affected units if we ever have to recall a batch. Your order record stays visible to you at your own order page for at least 12 months.
  • Server logs: kept only as long as our hosting provider retains them for operational and security purposes.

When a period ends we delete the record, or strip it of anything that identifies you.

How we protect it

Every page of this site is served over an encrypted HTTPS connection. Order records live in Google Cloud Firestore with all client access blocked at the database rules, so they are reachable only by our own server. Your order confirmation page is protected by a long random token rather than a guessable order number, so nobody can walk through order numbers and read other people’s details. The site sets strict security headers. Only the people who need order details can see them.

We review these arrangements as the shop changes. No system is perfect, so if we have reason to believe someone has got hold of your personal information who should not have, we will report it to the Information Regulator and tell you as soon as we reasonably can — what happened, what it could mean for you, what we are doing about it, and what we suggest you do.

Marketing, and how to stop it

We will not send you marketing email unless you have asked for it. Asking us to tell you when the sensor launches gets you that message — not a newsletter. If we ever want to send you more than that, we will ask you first, in a way you can decline without losing anything, and an unticked box or an unsubscribe link is not something we treat as your consent.

Once you have bought from us we may occasionally email you about the LPG Sense sensor and closely similar products of ours. You can say no when you order, and every message we send carries a one-click way to stop them. Every marketing email we send identifies us by name and gives an address you can write to in order to make it stop — or just email info@lpg.africa and we will remove you.

Your rights

Under POPIA you may, at any time and free of unnecessary formality:

  • Ask whether we hold information about you. That confirmation is free. Just email us.
  • Ask for a copy of it, together with who has had access to it. Use Form 2 under the PAIA Regulations, 2021 and send it to info@lpg.africa with proof of identity. A fee may apply to the copy itself; if it does, we give you a written estimate before we do anything, and asking for your own information carries no request fee. See our PAIA manual.
  • Ask us to correct or delete anything that is wrong, out of date, excessive, misleading or that we are no longer entitled to keep. Use Form 2 under the POPIA Regulations, or just email us — either way it is free. We will act as soon as we can and write back within 30 days to tell you what we did.
  • Object to us using your information where we rely on our own legitimate interests rather than your consent. Use Form 1 under the POPIA Regulations, or email us. Once you object, we stop.
  • Withdraw your consent whenever you like. It costs nothing, and it does not undo anything we lawfully did beforehand or interrupt an order already on its way to you.

The POPIA forms are on the Regulator’s site at inforegulator.org.za/popia-forms. We accept a request by email, post or any other reasonable means — we will not insist on a particular channel or a particular form.

Complaining to the Regulator

Complaints may be sent to info@lpg.africa, and may be lodged directly with the Information Regulator (South Africa) at any time:

Changes to this policy

If we change how we handle personal information we will update this page and change the date at the top. If a change is significant, we will tell the people it affects rather than leaving them to notice.