Operations
Domain Registration, Business Email, and Social Handles
Most new business owners approach naming sequentially — they choose a name, register it at CIPC, and then discover that the .co.za domain is taken, the .com is parked by a domain squatter, and the Instagram handle they wanted went years ago. The correct approach is to run all three checks simultaneously before finalising any name: CIPC availability, domain availability, and social handle availability. These are three completely separate systems with no connection to each other. A name clear in one system tells you nothing about the others.
Your digital foundation — domain, email, and social presence — is not an afterthought to physical business setup. It is the infrastructure through which most of your clients will find you, communicate with you, and assess whether you are worth working with. Getting it right at the start is materially cheaper than fixing it later.
The Name Check Sequence: Do All Three Before Committing
Before registering a company name at CIPC, confirming domain availability is non-negotiable. A domain name registered by someone else is not recoverable without either purchasing it from the registrant (who may demand a significant premium), waiting for it to expire (which may never happen), or commencing a domain dispute process (which is costly, slow, and not guaranteed to succeed).
Run these three checks before falling in love with any name:
CIPC company name availability: Search at bizportal.gov.za or cipc.co.za. A CIPC name registration does not protect the domain.
Domain availability: Check the .co.za and .com versions simultaneously at any accredited registrar. Domains.co.za, Afrihost, xneelo (Hetzner), and HOSTAFRICA are all ZACR-accredited South African registrars.
Social handle availability: Check LinkedIn, Instagram, Facebook, X (Twitter), TikTok, and YouTube simultaneously. Use Namecheckr.com or a similar tool to check multiple platforms in a single search.
If all three are available for your preferred name, register the domain and social handles immediately — before completing the CIPC registration, which takes longer. Domain registrations complete in minutes. A name that is available today may not be tomorrow.
Domain Names: The Foundation of Your Online Presence
A domain name is your address on the internet and the root of your business email addresses. It is distinct from your website — you can own a domain for years before building a website, and the domain is what matters for email from day one.
The South African Domain Hierarchy
Understanding the South African domain name system helps you make better decisions. ZADNA (ZA Domain Name Authority) is the regulatory authority for South African domain names. ZACR (ZA Central Registry) is the registry that manages the .co.za namespace. You cannot register directly with ZACR — you must use a ZACR-accredited registrar.
The primary extensions for South African businesses:
.co.za is the gold standard for South African businesses. It signals a local presence, is trusted by South African consumers, and receives preference in Google searches made within South Africa's borders (local SEO). If your primary market is South Africa, .co.za is non-negotiable. Pricing in 2026: R50 to R150 per year depending on the registrar.
.com is the global standard and the default expectation for international commerce. If you have any international ambition, register the .com. If a competitor registers the .com version of your brand while you hold the .co.za, they can create genuine brand confusion and intercept traffic that should reach you. Pricing in 2026: R100 to R200 per year.
.africa is a growing option for businesses with continental ambitions or a pan-African positioning. It is gaining recognition in business circles and signals a deliberately African business identity. Worth considering for businesses operating across multiple African markets.
City-specific domains (.joburg, .durban, .capetown) exist and are legitimate for hyper-local businesses that want to emphasise geographic identity. They have limited search volume and recognition beyond their specific markets.
The practical rule: register both the .co.za and the .com from the start. The combined cost is R150 to R350 per year — less than a single business lunch. The cost of not registering the .com and later discovering a competitor has it is orders of magnitude higher.
The CIPC Domain Portal: What It Is and What It Is Not
CIPC, in collaboration with ZADNA and ZACR, launched a domain registration portal that allows registered South African companies to register a .co.za domain directly through CIPC at R74.75. This is a legitimate service but has an important limitation: domains registered through CIPC must be transferred to a fully accredited registrar within 365 days of registration. CIPC does not provide hosting, email, or DNS management — only the registration.
For most businesses, registering directly with an accredited registrar (Domains.co.za, Afrihost, xneelo) is simpler and provides the full range of DNS management tools from the start. The CIPC portal is a useful fallback for a specific name that might be grabbed in the time it takes to process a CIPC company registration, but using it as your primary domain registration method adds an unnecessary transfer step.
Domain Privacy: Enable It
When you register a domain, your contact details — name, email, phone number — are published in the WHOIS database, which is publicly accessible. This exposes you to spam, phishing attempts, and potential targeting.
Domain privacy (also called WHOIS redaction) replaces your personal details in the WHOIS record with the registrar's proxy details. For .co.za domains, ZADNA's policy provides default WHOIS redaction for individual (natural person) registrants to comply with POPIA. For company registrations, some data may remain public. For .com and other gTLD domains, domain privacy is a separate feature that most reputable registrars offer free of charge — enable it when registering.
Some registrars charge extra for domain privacy on international domains. If a registrar charges for domain privacy on a .com domain when major registrars (Porkbun, Namecheap, Cloudflare) include it free, treat this as a negative signal about their pricing model.
Ownership and Registration Details
Register the domain in your own name or the company's name — never in the name of a web designer, IT provider, or marketing agency. Domain registrar credentials should be held by you personally, not by a service provider.
A service provider who holds your domain registration can (and sometimes does) use it as leverage in disputes over fees. Recovering a domain registered in someone else's name requires either their cooperation or a formal dispute process. Prevent the problem entirely by maintaining direct ownership from the start.
Set all domains to auto-renew and keep your payment details current. A domain that expires because a card was cancelled or billing details were outdated can be snapped up by a competitor or a domain squatter within hours of expiry. The consequences of losing an established domain name are severe — you lose your email, your website, and your search engine history. Treat domain renewal as seriously as any other annual business obligation.
Choosing a Registrar
South Africa's primary registrars in 2026:
Domains.co.za is the largest ICANN-accredited registrar in Africa and the most widely used for South African businesses. Competitive pricing, full DNS management, and a comprehensive range of extensions including .co.za, .com, and all major TLDs.
Afrihost provides domain registration alongside hosting and business email. Good for businesses that want to manage domain, hosting, and email through a single South African provider.
xneelo (Hetzner) is used by web developers and agencies for its reliable hosting and DNS management. Strong technical reputation.
HOSTAFRICA is an ICANN and ZACR accredited registrar with competitive pricing and South African-focused support.
For international domains only (non-.co.za), Cloudflare Registrar offers at-cost pricing with no markup, making it the most affordable option for .com and other global TLDs if you are comfortable with basic technical management.
Business Email: The Non-Negotiable Baseline
A business email address in your company domain — you@yourbusiness.co.za — is not a nice-to-have. It is a baseline professionalism requirement.
A Gmail, Yahoo, or personal email address for business communication signals an informal operation to clients, corporate procurement teams, and potential partners. It also creates practical problems: business correspondence gets mixed with personal email, and if a staff member leaves, their communications leave with them. A domain email address remains under the company's control regardless of staff changes.
The monthly cost of domain email is R100 to R300 per user depending on the platform. The cost of the unprofessional impression and the operational problems of mixed personal and business email far exceeds this.
Google Workspace
Google Workspace provides Gmail-branded domain email (your-address@yourdomain.co.za), Google Drive for document storage (15GB to 5TB depending on plan), Google Docs and Sheets for collaboration, Google Meet for video calls, and Google Calendar.
It is the most widely adopted business email and collaboration platform in South Africa. The interface is familiar to most users. Setup is straightforward. Integration with other business tools (Xero, HubSpot, Slack, and hundreds of others) is extensive.
DNS configuration required: When setting up Google Workspace email, you must update your domain's MX records through your registrar's DNS management panel to point email to Google's servers. Most registrars provide step-by-step instructions. The MX record update takes up to 24 to 48 hours to propagate globally. Until it does, email to your domain will not deliver.
Pricing (2026): Google Workspace Business Starter is approximately R110 to R130 per user per month, providing 30GB storage and professional email. Business Standard (approximately R220 per user per month) adds 2TB pooled storage, meeting recordings, and eSignature features.
Microsoft 365
Microsoft 365 provides Outlook for email, OneDrive for storage, SharePoint for document management, Teams for video and collaboration, and the full desktop Office suite (Word, Excel, PowerPoint) on Business Standard and higher plans.
Microsoft 365 suits businesses with existing Microsoft infrastructure, staff who are deeply accustomed to Outlook and desktop Office applications, or enterprise clients who expect Teams-based collaboration.
Pricing (2026): Microsoft 365 Business Basic is approximately R90 per user per month (web-only Office apps). Microsoft 365 Business Standard is approximately R310 per user per month (includes desktop Office apps).
Email Security: Three Records Every Domain Needs
Most businesses set up email and stop there. Three DNS records significantly improve email deliverability and reduce the risk of your emails being flagged as spam or spoofed by phishers:
SPF (Sender Policy Framework): A DNS record that specifies which mail servers are authorised to send email on behalf of your domain. Without SPF, receiving servers cannot verify that an email claiming to be from your domain was actually sent by you. Your email provider gives you the SPF record value to add to your domain's DNS.
DKIM (DomainKeys Identified Mail): A digital signature that verifies each outbound email was actually sent from your domain and not tampered with in transit. Google Workspace and Microsoft 365 both provide DKIM keys to add to your DNS records.
DMARC (Domain-based Message Authentication, Reporting and Conformance): A policy that tells receiving email servers what to do when an email fails SPF or DKIM checks — reject it, quarantine it, or allow it. DMARC also provides reporting on who is sending email on behalf of your domain, which helps detect phishing and spoofing attempts.
All three records are set through your domain registrar's DNS management panel. Your email provider's setup documentation includes the exact values. Setting them up takes 30 minutes and materially improves your email deliverability. Many business emails to corporate and government clients fail deliverability checks because these records are absent.
Website: When You Need One and What It Must Include
A website is not a day-one requirement for every business. A founder launching a professional services practice can begin trading with a Google Workspace email, a LinkedIn profile, and a domain that redirects to that LinkedIn profile, while the website is built properly. A business with physical retail or a product needs a website before opening.
What matters is that you control the domain and the email from day one. The website can follow.
What Your Website Must Include Under South African Law
POPIA imposes legal requirements on any South African website that collects personal information from visitors — which includes any website with a contact form, newsletter signup, comment section, or analytics tracking.
Privacy policy: A legally binding document that discloses what personal information you collect, why you collect it, how you use it, who you share it with, and how visitors can exercise their rights under POPIA (access, correction, deletion). A privacy policy is not optional if your website collects any personal information. A basic contact form counts.
Cookie consent: If your website uses cookies — and Google Analytics and most modern websites do — you must inform visitors and obtain consent before setting non-essential cookies. A cookie banner or consent mechanism is required. POPIA aligns with global cookie consent standards in this respect.
Contact details: The Electronic Communications and Transactions Act (ECTA) requires websites that conduct electronic transactions (including accepting inquiries or selling products or services) to display the business's full name, registration number, physical address, and contact details.
Terms and conditions: For any e-commerce site or platform providing services through the website, terms and conditions govern the relationship with users. They must comply with the Consumer Protection Act's plain language requirements and include refund and cancellation policies.
Fines under POPIA reach R10 million. The Information Regulator has indicated an intention to enforce these requirements actively. A privacy policy and cookie consent mechanism cost little to implement and are non-negotiable from the day the website goes live.
Social Media: Claim Your Handles Now
Register social media handles across all relevant platforms before trading begins, even if you do not intend to be active on every platform immediately. A handle that is taken cannot be recovered without significant effort — most platforms have minimal processes for releasing inactive handles, and those that exist are slow and uncertain.
Which Platforms Matter and When
LinkedIn is the most important professional network for B2B businesses in South Africa. If your clients are corporate, a LinkedIn company page and an active personal profile as founder are essential from day one. LinkedIn profiles appear prominently in Google searches, making them part of your discoverability even if your website is not yet built.
Instagram matters for any consumer-facing business where visual content is relevant — food, fashion, beauty, interior design, architecture, retail, hospitality. For B2B and professional services, it is lower priority.
Facebook remains the largest social network in South Africa by active users and is important for consumer-facing businesses, community-building, and businesses advertising to a broad demographic. A Facebook Business Page enables Meta advertising across Facebook and Instagram.
X (Twitter) has reduced relevance for most South African SMEs following platform changes since 2022. It retains value for businesses in media, politics, technology, and professional commentary.
TikTok is growing rapidly among South African consumers under 35 and is increasingly relevant for consumer brands, retail, and any business creating video content. Short-form video content on TikTok reaches audiences that other platforms do not.
YouTube is relevant for any business that produces video content — tutorials, product demonstrations, testimonials, educational content. YouTube content has long-term searchability that other video platforms lack.
Handle Strategy
A consistent handle across all platforms strengthens brand recognition and makes it easier for people to find you. The ideal handle is your exact business name, one word if possible, without numbers or underscores where avoidable.
If your preferred handle is taken on a platform you care about, check when the account was last active. For completely dormant accounts, some platforms have processes for releasing them — worth pursuing if the handle is important to your brand identity.
Use Namecheckr.com, Knowem.com, or Namechecklist.com to check availability across multiple platforms simultaneously. Do this before finalising your business name.
Registering Handles You Are Not Yet Using
Register handles on platforms you are not yet active on to protect your brand. A registered but inactive account is infinitely preferable to finding your brand name taken when you eventually want to use the platform. Park the account with your logo and a brief description, link it to your website, and leave it until you are ready to activate it.
The Domain-Email-Social Sequence
The optimal sequence for a new business:
- Check name availability across CIPC, .co.za, .com, and all relevant social platforms simultaneously
- Register the .co.za and .com domains immediately on confirming availability — before the CIPC registration, which takes longer
- Register social handles across all relevant platforms at the same time as domain registration
- Set up Google Workspace or Microsoft 365 email on your domain — do not begin client communication from a personal email
- Configure SPF, DKIM, and DMARC records for your domain
- Register the CIPC company name
- Build the website when ready — but ensure the POPIA privacy policy and cookie consent are in place before going live
Common Mistakes Worth Avoiding
Registering the company name before checking domain availability. The CIPC registration locks you in. The domain may be taken. Check domain availability first.
Only registering the .co.za and ignoring the .com. At R100 to R200 per year, the .com is cheap insurance against a competitor or domain squatter using it to create brand confusion.
Registering the domain in a service provider's name. Always maintain direct ownership. Disputes over domain control are costly and painful to resolve.
Not enabling auto-renew. A lapsed domain can be registered by anyone within hours of expiry. Set auto-renew from day one.
Not setting SPF, DKIM, and DMARC records. Email without these records is more likely to land in spam and more vulnerable to spoofing. Configure them during initial setup, not after deliverability problems arise.
Using a personal email for business communication. Domain email costs less than R200 per user per month. There is no justification for conducting business from a personal account.
Not registering social handles on platforms you are not yet using. A handle you do not register can be taken. Register across all relevant platforms immediately.
Building a website without a POPIA-compliant privacy policy. A website with a contact form, analytics, or newsletter signup that does not disclose its data processing practices is non-compliant. Include the privacy policy from launch day.
Not auditing domain registration details annually. Keep payment methods current, confirm registrant contact details are correct, and verify that auto-renew is active. Losing a domain through administrative neglect is an entirely avoidable business continuity failure.
This article provides general information about domain registration, business email, and digital presence for South African businesses. Domain availability and pricing change constantly — verify current availability and pricing directly with registrars before making decisions. Nothing in this article constitutes legal advice.
This article provides general information about South African business law and regulation. It is not legal, tax, or financial advice. Laws and regulations change — verify current requirements with a qualified professional or directly with the relevant authority before making decisions.