Privacy Policy

1. What Information We Collect

We collect only the personal and juristic person information necessary to respond to your enquiries and deliver the services you request:

• Enquiry & Contact Data: Your name, email address, phone/WhatsApp number, business name, and project notes when you contact us via our enquiry form or email.
• Billing & Client Account Data: Company registration details, billing address, VAT number (where applicable), and payment confirmation records.
• Administrative Filing Data (when you instruct us for CIPC / SARS / POPIA filings): Director full names, identity/passport numbers, residential and business addresses, shareholdings, and power-of-attorney mandates required by CIPC, SARS, or the Information Regulator.
• Technical & Hosting Data: Domain registrant details required by registries (such as ZACR for .co.za) and standard server security logs.

2. Purpose & Lawful Basis for Processing

Under Section 11 of POPIA (and Article 6 of the UK/EU GDPR where applicable to international clients), we process your personal information to:

• Prepare quotes, proposals, and service agreements at your request;
• Design, build, host, and maintain your website, domain, and business email;
• Submit administrative filings to CIPC, SARS, or the Information Regulator on your explicit mandate;
• Produce and courier branded clothing and corporate gifts to your designated address; and
• Comply with South African tax, company, and record-keeping legislation.

3. Operators, Registries & Cross-Border Transfers

We never sell or rent your personal information. We share relevant details only with trusted operators and statutory bodies strictly needed to fulfil your instruction (such as CIPC, SARS, domain registries, HostAfrica / LiteSpeed hosting infrastructure, Google Workspace / Microsoft 365 when requested, and courier partners for corporate gifting), subject to Section 72 of POPIA.

4. Security Safeguards & Retention

In terms of Section 19 of POPIA, we protect your information using HTTPS/TLS encryption, access-controlled cloud storage, two-factor authentication, and strict confidentiality obligations. Identity documents supplied for CIPC/SARS administrative filings are retained only as long as required to complete the filing and satisfy statutory record-keeping rules.

5. Your Rights as a Data Subject

You have the right to request access to the personal information we hold about you, request correction or deletion of inaccurate or unnecessary records (POPIA Form 2), or object to processing (POPIA Form 1) by writing to our Information Officer at hello@wakefulstudio.co.za. You also have the right to lodge a complaint with the Information Regulator (South Africa) at inforeg@justice.gov.za / POPIAComplaints@inforegulator.org.za.