Privacy, without the fog

Loadline Studio is a web studio working with local businesses in South Africa. This note explains what happens to the information you give us, and it follows the Protection of Personal Information Act 4 of 2013 (POPIA).

This is a working template written for the studio. It must be reviewed by an attorney before launch — it is not legal advice.

Enquiry and mockup submissions: business name, your name, trade, phone or WhatsApp number, the areas you cover, your website if you have one, and whatever you write in the message field.

Site analytics: pages viewed, approximate location from IP address, device and browser type, and how you arrived here.

Correspondence: emails, WhatsApp messages and call notes for as long as the work is live.

To answer you, build your mockup, quote you and do the work you asked for. Nothing else.

To understand which pages are useful so the site can be improved. Analytics data is aggregated and is not used to profile you.

We do not sell, rent or trade your details to anybody.

We do not add you to a marketing list you did not ask for, and there is no drip sequence after an enquiry.

We do not process your customers' information. If your site collects customer details, those belong to you and live on your own accounts.

Only the tools needed to run the studio: our email provider, hosting provider, WhatsApp Business and our analytics provider.

Where a provider stores data outside South Africa we rely on POPIA section 72 (transborder flows) and keep to providers with comparable protections. [List the actual providers and their locations here.]

Enquiries that do not become work: [X] months, then deleted.

Client records: for the duration of the work plus [X] years, because invoices and agreements must be retained.

Analytics: as configured with the provider, currently [X] months.

You can ask what we hold about you, ask for a copy, ask for corrections, or ask us to delete it. Send the request and it is actioned within [X] days.

You can also object to processing, or complain to the Information Regulator of South Africa at inforeg.org.za.

Data is kept on access-controlled accounts, with two-factor authentication wherever the provider supports it.

No system is perfect. If a breach ever affects your information, you will be told directly and without spin.

The site sets a small number of cookies for analytics, which can be blocked in your browser without breaking anything.

[Add a cookie notice and list the actual cookies before launch.]

Phone or WhatsApp: 082 300 6996. Information officer: [Name], [email address].

Last updated: [date].