1. Who we are (the Responsible Party)
Strada Studio (“we”, “us”, “our”) is the “responsible party” for the processing of your personal information under POPIA. We are a design studio operating from Gqeberha, Eastern Cape, South Africa.
- Legal entity: Strada Studio
- Email: hello@stradastudio.co.za
- Website: stradastudio.co.za
- Information Officer: the Information Officer, reachable at hello@stradastudio.co.za
[Confirm legal status and registration number before launch — e.g. sole proprietorship trading as Strada Studio, or (Pty) Ltd registration number YYYY/NNNNNN/07.]
[Insert full street address — required for ECTA section 43 disclosure.]
[Confirm the name of the appointed Information Officer registered with the Information Regulator.]
2. Scope of this policy
This policy applies to personal information we process through our website at stradastudio.co.za and in the course of enquiries and work that follow from it. “Personal information” means information that identifies, relates to, or can be linked to you, as defined in POPIA.
3. What personal information we collect
We keep the information we collect to the minimum needed:
Information you give us
- Contact and enquiry details submitted through our contact form or by email — your name, email address, the type of project you are interested in, and the contents of your message.
Information collected automatically
- Technical and usage data that your browser and our hosting provider generate when you visit — such as your IP address, browser and device type, the pages you view, and the date and time of access. This is used for security, troubleshooting, and to keep the site running.
- Local storage preferences kept in your browser to remember whether you have visited before and which parts of the experience you have explored. These do not identify you. See our Cookie Policy for the full list.
We do not knowingly collect any special personal information (such as health, religion, race, or political views) and ask that you do not send it to us.
4. Why we process your information and our lawful basis
POPIA requires us to have a lawful basis for processing your personal information. We rely on the following:
| Purpose | Lawful basis under POPIA |
|---|---|
| Responding to your enquiry and discussing a possible project | Your consent and steps taken at your request before entering a contract |
| Providing, securing, and maintaining our website | Our legitimate interest in operating the site safely |
| Keeping records and complying with the law | Compliance with a legal obligation and our legitimate interests |
Where we rely on your consent, you may withdraw it at any time (see your rights below). Withdrawing consent does not affect processing that already took place.
5. Children
Our website and services are intended for businesses and adults. We do not knowingly collect the personal information of children under 18. If you believe a child has given us information, please contact us and we will delete it.
6. Who we share your information with
We do not sell your personal information. We share it only where necessary, and with parties who are required to keep it confidential and secure:
- Operators (service providers) who process information on our behalf — for example website hosting, email delivery, and form handling. POPIA requires these operators to process your information only on our instructions and to protect it.
- Professional advisers and authorities where we are required to share information by law or to establish, exercise, or defend legal claims.
7. Cross-border transfers
Some of our service providers may store or process information on servers located outside South Africa. Where this happens, POPIA (section 72) requires that the recipient is subject to laws, binding rules, or agreements that provide a level of protection substantially similar to POPIA. We take reasonable steps to ensure this is the case.
[Confirm your hosting and email providers and the countries in which they store data, so this section reflects your actual setup.]
8. How we protect your information
As required by section 19 of POPIA, we take appropriate, reasonable technical and organisational measures to safeguard your personal information against loss, damage, unauthorised access, and unlawful processing. These include encrypted (HTTPS) connections, access controls, and limiting the information we collect and keep. No method of transmission or storage is completely secure, but we work to protect your information and to address any security incident promptly. If a breach affecting your information occurs, we will notify you and the Information Regulator as required by law.
9. How long we keep your information
We keep personal information only for as long as necessary for the purpose it was collected, or as required by law. Enquiry details are kept while we are in contact and for a reasonable period afterwards in case you return; project records are kept for as long as needed for the work and for legal and accounting requirements. When information is no longer needed, we delete or de-identify it.
10. Your rights
Under POPIA you have the right to:
- Be informed about how we collect and use your personal information (which this policy provides).
- Access the personal information we hold about you.
- Request correction of information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or unlawfully obtained.
- Request deletion or destruction of your information in the circumstances allowed by law.
- Object to the processing of your information on reasonable grounds.
- Withdraw your consent where we rely on it.
- Lodge a complaint with the Information Regulator (see below).
11. How to exercise your rights
To make any request, email us at hello@stradastudio.co.za. We may need to verify your identity before acting on a request. Formal access requests may be made using the prescribed PAIA request form. We will respond within the timeframes required by law and will not charge a fee except where the law permits.
12. Direct marketing
We will only send you electronic marketing (such as newsletters or updates) if you have agreed to receive it, or where otherwise permitted by POPIA section 69 and the Consumer Protection Act. Every marketing message will include a simple way to opt out, and we will stop on request.
13. Cookies and local storage
Our site uses a small amount of essential local storage and does not use third-party advertising or tracking cookies. Full details are in our Cookie Policy.
14. Complaints to the Information Regulator
If you are not satisfied with how we have handled your personal information, please contact us first so we can try to put it right. You also have the right to complain to the Information Regulator (South Africa):
- Website: https://inforegulator.org.za
- POPIA complaints: POPIAComplaints@inforegulator.org.za
- General enquiries: enquiries@inforegulator.org.za
- Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
- Telephone: 010 023 5200 · Toll free 0800 017 160
15. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the “last updated” date at the top of this page. Please review it periodically.
16. Contact us
For any privacy question or request, contact our Information Officer at hello@stradastudio.co.za.