Privacy Policy

1. Who we are

Strada Studio is a web design and development studio based in Gqeberha (Port Elizabeth), South Africa. In this policy, “we”, “us” and “Strada Studio” refer to the studio operating stradastudio.co.za. The studio is the responsible party under the Protection of Personal Information Act, 2013 (POPIA).

2. What we collect

When you complete the contact form on our website, we collect:

• Your name
• Your email address
• Your business name (optional)
• Your indicative budget range (optional)
• The project description you provide
• The date and time at which you submitted the form and gave consent
• The IP address from which the form was submitted (used only for abuse prevention)

We do not use third-party analytics, advertising cookies, behavioural trackers, or fingerprinting on this site. We do not collect special personal information (race, health, religion, biometrics, etc.) and we ask that you do not share that information through the contact form.

3. Why we collect it (lawful basis)

We process the information you submit on the basis of your consent (Section 11(1)(a) of POPIA), which you give explicitly by ticking the consent box on the contact form before sending.

We use the information solely to:

• Reply to your enquiry and prepare a proposal
• Keep a record of the conversation for the duration of the engagement
• Detect and prevent abuse of the contact form (rate limiting, spam filtering)

We do not sell, rent, share or otherwise disclose your information to third parties for marketing. We do not send unsolicited marketing email.

4. Where it's stored

Form submissions are stored in a Supabase Postgres database located in Stockholm (eu-north-1). Email notifications are delivered through Resend (United States). Both providers act as operators on our behalf under POPIA. Data in transit is encrypted (TLS 1.2+) and data at rest is encrypted by the storage provider.

5. How long we keep it

We retain enquiry records for 12 months from the date of submission, after which they are deleted from the database. If we go on to work with you, the information becomes part of your project record and is kept for the duration of the engagement plus seven years (the standard South African tax retention period) before being deleted.

6. Your rights

Under POPIA you have the right to:

• Ask what personal information we hold about you
• Ask us to correct information that is wrong, misleading or out of date
• Ask us to delete information we are no longer entitled to keep
• Withdraw your consent at any time (without affecting processing carried out before withdrawal)
• Object to processing or lodge a complaint with the Information Regulator

To exercise any of these rights, email stradastudi00@gmail.com with the subject “POPIA request”. We respond within 30 days.

7. Cookies

This site uses only strictly necessary technical cookies set by our hosting provider (Vercel) for security and performance. We do not set analytics or advertising cookies.

8. Security

We protect your information using row-level security on the database, server-side input validation, a content-security policy, HTTPS-only transport, rate limiting, and least-privilege access for our operators. If we ever become aware of a security incident affecting your information, we will notify you and the Information Regulator as required by POPIA.

9. Changes to this policy

If we change this policy materially, we will update the “Last updated” date at the top and, where we still have a record of your contact details, notify you by email.

10. Contact and complaints

For any privacy question, write to stradastudi00@gmail.com.

If you are not satisfied with our response, you may lodge a complaint with the Information Regulator of South Africa at POPIAComplaints@inforegulator.org.za.