Privacy notice.

1. Who is responsible for your information

CreativeDigital is a sole proprietorship operating from Cape Town, South Africa. For the purposes of the Protection of Personal Information Act (POPIA), CreativeDigital is the responsible party for the personal information described here, and Romano is the appointed Information Officer.

• Email: info@creativedigital.co.za
• Phone: +27 76 656 6055
• Location: Cape Town, South Africa

2. What we collect, and when

We collect only what you hand over, and only where you have chosen to make contact. There is no account system on this site and nothing here requires you to register.

When you submit an enquiry form

• Your name and email address (required to reply to you)
• Your company name, if you choose to give it (optional)
• What you are trying to fix, in your own words
• Which service you selected, and any packages you added to a brief or plan before sending
• The page you were on when you sent the enquiry

Automatically, when you browse

• Standard analytics data: pages viewed, approximate location by country, device and browser type, and how you arrived at the site
• Your IP address is processed by our analytics and font providers as an unavoidable part of serving the page

Stored in your own browser, not sent to us

The package brief, the plan builder, the payment view (once-off or monthly) and your colour theme are saved in your browser's local storage so the site remembers them between pages. This stays on your device, is not transmitted to us, and is cleared when you clear your browser data. Only if you press send does any of it reach us.

3. Why we process it

Under POPIA we must have a lawful basis. Ours are straightforward:

• To reply to you. If you send an enquiry, we use your details to answer it, quote the work and, if you go ahead, deliver it. This is necessary to take steps at your request before entering an agreement.
• To run the business. Invoicing, record keeping and the tax records we are legally required to retain.
• To understand what the site is doing. Aggregate analytics tell us which pages answer people's questions. This is our legitimate interest, and it is measured in aggregate, not to build a profile of you.

We do not sell your information. We do not share it for anyone else's marketing. We do not add you to a newsletter because you sent an enquiry, and there is no CRM sequence waiting for you.

4. Who else sees it

A small number of service providers process information on our behalf. These are the only ones, and each is listed because it genuinely receives data, not to pad the list:

• Nobody, for the contact forms. Enquiries are handled by our own server and delivered straight to our mailbox. They do not pass through a third-party form service, and the form does not leave South Africa on the way to us.
• Google Analytics, where enabled, provides the aggregate traffic reporting described above and receives your IP address as part of that. Analytics is only loaded when it is actually configured, so if it is switched off no request is made and no analytics cookie is set at all.
• Google Fonts serves the typefaces this site uses. Your browser requests these from Google, which means Google sees your IP address when the page loads.
• Our email and hosting providers, who hold the correspondence and serve the site itself.

If you contact us on WhatsApp instead, that conversation is governed by WhatsApp's own privacy terms, not ours.

5. Information leaving South Africa

What you send through a contact form stays here: it is processed on our own server and delivered to our own mailbox, with no third-party form service in between.

Analytics and font delivery are different. Where those are enabled they are operated by Google outside South Africa, which POPIA section 72 treats as a cross-border transfer, and we rely on those services being subject to legal frameworks giving comparable protection. That processing is limited to aggregate usage data and your IP address, and never includes what you type into a form.

6. How long we keep it

Enquiries that do not become work are kept for up to 24 months, in case you come back to us, then deleted. Records relating to actual client work are kept for at least five years because South African tax and company legislation requires it. Analytics data is retained according to our provider's standard retention window.

7. Your rights

POPIA gives you real rights over your information, and we will not make you fight for them. You may:

• Ask what personal information we hold about you, and get a copy
• Have anything inaccurate corrected
• Ask us to delete information we no longer have a lawful reason to keep
• Object to processing based on legitimate interest
• Complain to the Information Regulator if we get it wrong

Email info@creativedigital.co.za and we will respond within 30 days. There is no charge for a reasonable request.

The Information Regulator of South Africa can be reached at enquiries@inforegulator.org.za. You are entitled to go to them directly, though we would rather you gave us the chance to fix it first.

8. Cookies and similar technology

This site sets no advertising cookies and runs no tracking pixels for third-party advertising networks. What it does use:

• Analytics cookies set by Google Analytics to count visits and understand which pages are useful.
• Local storage for the brief, plan, payment view and theme, as described above. This is functional, stays on your device, and the site does not work as intended without it.

You can block or clear both through your browser settings. Blocking them will not lock you out of anything on this site.

9. Security, honestly stated

The site is static, which removes most of the attack surface a database-driven site carries. Traffic is served over HTTPS. Access to enquiry email is protected by multi-factor authentication. No system is perfectly secure, and we will not pretend otherwise: if a breach affects your personal information, POPIA requires us to notify both you and the Information Regulator, and we will.

10. Changes

If this notice changes materially we will update the date at the top. Continued use of the site after a change means the current version applies.