Privacy Policy

1. Introduction

IT² Digital Studio ("IT²", "we", "us"), is the responsible party for the personal information collected through this website. We process personal information in line with the Protection of Personal Information Act 4 of 2013 ("POPIA"). Our POPIA page sets out your rights in more detail.

2. Information we collect

Information you give us

When you send an enquiry through our contact form, we collect:

• your name and email address;
• your company or brand name (optional);
• the service you are interested in (optional);
• anything you include in your message.

If you contact us on WhatsApp or by email, we receive your phone number or email address, your name as it appears on that service, and the content of your messages.

Information collected automatically

Like most websites, our hosting provider (Cloudflare) automatically logs basic technical information when you visit, such as your IP address, browser type and the pages requested. We use these logs only to keep the website secure and running properly.

3. Cookies and tracking

This website does not use analytics or advertising trackers. Our contact form is protected by Cloudflare Turnstile, which checks that a person, not a bot, is sending the form. To do this, Turnstile collects technical signals from your browser and device. It does not use them for advertising or to track you across other websites.

If we add other cookies or tracking in future, we will update this policy and, where required, ask for your consent first.

4. How we use your information

We use your personal information only to:

• respond to your enquiry and discuss your project;
• prepare proposals and quotes you ask for;
• deliver services and manage our relationship if you become a client;
• protect the website and our contact form against spam and abuse;
• comply with our legal obligations.

We will not use your information for direct marketing without your consent, and we never sell your personal information.

5. Legal basis for processing

Under section 11 of POPIA, we process your personal information because:

• you have consented to it by contacting us;
• it is needed to take steps you asked for before entering into an agreement with us, or to perform that agreement;
• it is needed to comply with a legal obligation; or
• it is in our legitimate interest, for example keeping the website secure.

6. Who we share it with

We only share your information with trusted service providers (operators) who help us run our business, and only as much as they need:

• Resend, which delivers contact form submissions to our inbox by email;
• WhatsApp (Meta), if you choose to contact us on WhatsApp;
• Cloudflare, which hosts the website, stores the server logs described above, and runs the Turnstile spam check on our contact form;
• our email provider, where our correspondence with you is kept.

These providers must protect your information and may not use it for their own purposes. We may also disclose information where the law requires it.

7. Transfers outside South Africa

Some of our service providers, including Resend, WhatsApp and Cloudflare, store or process data on servers outside South Africa. Where this happens, we rely on section 72 of POPIA and only use providers that are subject to laws, binding agreements or policies that offer an adequate level of protection.

8. How long we keep it

We keep personal information only for as long as we need it for the purposes above. Enquiries that do not lead to a project are deleted within 12 months. Client records are kept for as long as the law requires, for example for tax and accounting purposes.

9. How we protect it

We take reasonable technical and organisational measures to protect your personal information against loss, misuse and unauthorised access. These include encrypted (HTTPS) connections, access controls on the accounts that hold your information, and spam protection on our contact form. No method of transmission over the internet is completely secure, but we work to keep your information safe.

10. Your rights

You have the right to ask what personal information we hold about you, and to ask us to correct or delete it. You can also object to our processing of it, and lodge a complaint with the Information Regulator. See our POPIA page for how to make a request.

11. Children

This website is intended for businesses and adults. We do not knowingly collect personal information from children under 18.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

13. Contact us

For any privacy question, contact our Information Officer, Tasneem Allie, at tasneem@it2digital.co.za.