Legal
Privacy Policy
Brunel Studios (Pty) Ltd ("Brunel Studios", "we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African law.
1. Who This Policy Applies To
This Policy applies to all individuals whose personal information we process, including visitors to our website (brunelstudios.co.za), prospective and current clients, and contacts who communicate with us.
2. Information We Collect
We may collect and process the following categories of personal information:
- Contact details — name, email address, phone number, company name.
- Enquiry and project information — details you provide when submitting an enquiry or booking a consultation.
- Technical data — IP address, browser type, pages visited, and visit duration collected automatically via server logs or analytics tools.
- Communication records — emails, messages, and meeting notes exchanged with us.
We do not knowingly collect personal information from persons under the age of 18 without parental consent.
3. How We Use Your Information
We process your personal information for the following purposes:
- To respond to enquiries and provide our Services.
- To schedule and conduct discovery calls and project meetings.
- To send project-related communications and invoices.
- To improve our website and Services through aggregated analytics.
- To comply with our legal and regulatory obligations.
- To contact you about relevant services or updates where you have given consent or where we have a legitimate interest to do so.
4. Legal Basis for Processing
Under POPIA, we process your personal information on one or more of the following grounds: (a) your consent; (b) performance of a contract with you; (c) compliance with a legal obligation; (d) a legitimate interest pursued by us that is not outweighed by your rights and interests.
5. Sharing of Personal Information
We do not sell your personal information. We may share it with trusted third parties only where necessary to deliver our Services or operate our business, including:
- Cloud hosting and infrastructure providers.
- Communication and scheduling tools (e.g. Google Workspace, Google Calendar).
- Accounting and invoicing software.
- Professional advisors (legal, accounting) bound by confidentiality.
All third-party operators are required to treat your information with the same level of protection as we do and may only process it on our documented instructions.
6. International Transfers
Some of our third-party service providers operate outside South Africa. Where we transfer personal information cross-border, we do so only to jurisdictions that provide adequate protection, or we put in place appropriate contractual safeguards as required by POPIA.
7. Data Retention
We retain personal information for as long as necessary to fulfil the purposes described in this Policy, or as required by law. Client project records are typically retained for 5 years after project completion. Website enquiry data is retained for 2 years unless a client relationship is established.
8. Security
We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. In the event of a data breach that poses a risk to you, we will notify you and the Information Regulator as required by POPIA.
9. Cookies and Analytics
Our website may use cookies and similar technologies to analyse traffic and improve your experience. You can control cookies through your browser settings. We do not use cookies for targeted advertising. Where analytics are used, data is aggregated and anonymised to the extent possible.
10. Your Rights Under POPIA
You have the right to:
- Request access to the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Object to the processing of your personal information.
- Request deletion of your personal information (subject to legal retention requirements).
- Lodge a complaint with the Information Regulator of South Africa at www.justice.gov.za/inforeg/.
To exercise any of these rights, please contact our Information Officer using the details below. We will respond within 30 days.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date. Continued use of our website or Services after changes constitutes acceptance of the updated Policy.
12. Contact / Information Officer
For any privacy-related queries, requests, or complaints, please contact our
Information Officer:
Brunel Studios (Pty) Ltd
Dock Road Junction, Cnr Dock Road and Stanley Street, V&A Waterfront, Cape Town, 8001
gerard@brunelstudios.co.za