Privacy Policy
This policy explains how RaveDigital collects, uses, stores, and protects your personal information in compliance with the Protection of Personal Information Act (POPIA), Act 4 of 2013.
1.Introduction & Who We Are
RaveDigital (Pty) Ltd ("RaveDigital", "we", "us", or "our") is a South African digital agency specialising in AI-powered websites, lead generation systems, and business automation. We are committed to protecting the personal information of every individual who interacts with our website, services, or communications.
This Privacy Policy applies to all personal information collected through our website at ravedigital.co.za, our lead capture forms, email communications, and any other touchpoints where we collect personal information.
2.Information We Collect
We collect only the personal information that is necessary for the purposes described in this policy. The categories of information we may collect include:
| Category | Examples | Required? |
|---|---|---|
| Identity | Full name | Yes |
| Contact | Email address, phone number | Yes |
| Business | Company name, industry, location | Optional |
| Enquiry | Service interest, project description | Optional |
| Technical | IP address, browser type, pages visited | Automatic |
| Usage | Pages viewed, time on site, referral source | Automatic |
We do not collect special personal information (as defined in POPIA Section 26) such as race, religion, health information, sexual orientation, or criminal records.
3.How We Collect Your Information
We collect personal information through the following means:
- Lead capture forms — when you submit an enquiry through our website contact or quote request forms.
- Email and phone communications — when you contact us directly via email or telephone.
- WhatsApp — when you initiate a conversation through our WhatsApp business contact.
- Cookies and analytics — automatically when you browse our website, subject to your cookie consent preferences.
- Service delivery — during the course of providing services to you as a client.
4.Purpose for Processing Your Information
We process your personal information only for specific, explicitly defined, and lawful purposes. We will not process your information in a manner incompatible with these purposes.
Responding to enquiries
To contact you in response to a quote request, question, or service enquiry you have submitted.
Service delivery
To provide, manage, and improve the digital services you have engaged us to deliver.
Invoicing and payment
To issue invoices, process payments, and maintain financial records as required by law.
Direct marketing
To send you relevant information about our services, subject to your opt-in consent and the right to opt out at any time.
Website improvement
To analyse how visitors use our website so we can improve content, performance, and user experience.
Legal compliance
To comply with applicable South African laws including POPIA, the Companies Act, and the Electronic Communications and Transactions Act.
Security
To detect, prevent, and investigate fraudulent or malicious activity on our website and systems.
5.Lawful Basis for Processing
Under POPIA, we are required to have a lawful basis for processing your personal information. We rely on the following grounds:
- Consent — you have given us clear consent to process your information for a specific purpose (e.g., direct marketing, analytics cookies).
- Contractual necessity — processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
- Legal obligation — processing is necessary to comply with a legal obligation to which we are subject.
- Legitimate interest — processing is necessary for our legitimate business interests (e.g., fraud prevention, website security), provided those interests are not overridden by your rights.
7.Data Retention
We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law.
| Data Type | Retention Period |
|---|---|
| Lead enquiry data | 3 years from date of enquiry |
| Client project data | 5 years after project completion |
| Financial records | 7 years (SARS requirement) |
| Marketing consent records | Until consent is withdrawn |
| Website analytics data | 26 months (Google Analytics default) |
When your information is no longer required, we will delete or anonymise it in a secure manner.
8.Security of Your Information
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- HTTPS encryption on all website communications (TLS 1.2+)
- Encrypted database storage for all lead and client data
- Access controls limiting data access to authorised personnel only
- Cloudflare Turnstile CAPTCHA on all public-facing forms to prevent automated abuse
- Regular security reviews of our systems and third-party integrations
9.Your Rights Under POPIA
The Protection of Personal Information Act grants you the following rights in respect of your personal information held by us. You may exercise any of these rights by contacting our Information Officer.
Right of access
You have the right to request a copy of the personal information we hold about you.
Right to correction
You have the right to request that we correct inaccurate, incomplete, or outdated personal information.
Right to deletion
You have the right to request deletion of your personal information where we no longer have a lawful basis to retain it.
Right to object
You have the right to object to the processing of your personal information, including for direct marketing purposes.
Right to withdraw consent
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to complain
You have the right to lodge a complaint with the Information Regulator of South Africa if you believe we have violated your rights.
We will respond to all rights requests within 30 days of receipt, as required by POPIA.
11.Third-Party Services & Links
Our website may contain links to third-party websites and integrates with the following third-party services:
- Google Analytics — website usage analytics (subject to your cookie consent)
- Resend — transactional email delivery
- Cloudflare Turnstile — bot protection on forms
- WhatsApp Business — customer communication (Meta's privacy policy applies to WhatsApp conversations)
We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any external sites you visit.
12.Children's Privacy
Our website and services are directed at businesses and adults. We do not knowingly collect personal information from children under the age of 18. If you believe a child has submitted personal information to us, please contact us immediately and we will delete that information without delay.
13.Cross-Border Transfers
Some of our third-party service providers (such as Google Analytics and Resend) may process your personal information outside of South Africa. Where such transfers occur, we ensure that adequate safeguards are in place as required by POPIA Section 72, including that the recipient country provides an adequate level of protection, or that appropriate contractual protections are in place.
14.Direct Marketing
We will only send you direct marketing communications (such as newsletters or service updates) where you have given us your explicit consent to do so, or where we have an existing client relationship and the communication is relevant to services similar to those you have previously engaged.
Every marketing communication we send will include a clear and easy mechanism to opt out. You can also opt out at any time by contacting us at [email protected] with the subject line "Unsubscribe".
15.Complaints & the Information Regulator
If you are unhappy with how we have handled your personal information, please contact our Information Officer in the first instance. We will investigate your complaint and respond within 30 days.
If you remain dissatisfied after our response, you have the right to lodge a complaint with the Information Regulator of South Africa:
Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
Email: [email protected]
Website: www.justice.gov.za/inforeg
16.Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes, we will update the "Last updated" date at the top of this page.
We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.
17.Contact Our Information Officer
For any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal information, please contact our designated Information Officer:
We aim to respond to all privacy-related requests within 2 business days and to resolve all matters within the 30-day period prescribed by POPIA.