Privacy Policy

Who we are

Emanatio (Pty) Ltd (“Emanatio”, “we”, “us”) is a digital studio based in Johannesburg, South Africa. We design and build websites, custom software and automation for our clients. This policy explains what personal information we collect through this website, why, and what rights you have over it under the Protection of Personal Information Act, 2013 (POPIA).

Information we collect

We collect personal information only when you choose to give it to us:

• When you send us a project brief or a contact enquiry, we collect your name, organisation, email address and whatever project details you write.
• When you unlock a case study or our process page, we collect your work email address, which page you opened, and whether you asked us to contact you about a project.
• Our server automatically logs basic technical information for every visit, such as your IP address, browser type and the page requested, the way most web servers do.

We do not use analytics, advertising or tracking cookies. Your choice of light or dark theme is stored only in your own browser, stays on your device, and is never sent to us.

How we use your information

We use the information you send us to reply to your enquiry, prepare a proposal, and, if you become a client, to deliver and manage that work. We use server logs only to keep the site running securely and to diagnose problems. We do not sell, rent or share your information for marketing purposes, and we do not use it to send you anything you have not asked for.

Our lawful basis for processing

We process your enquiry because you have given it to us for a specific purpose: to hear back from us about your project. We process server logs because doing so is necessary for our legitimate interest in keeping the website secure and working correctly, weighed against your right to privacy.

How long we keep it

We keep enquiries and project briefs that do not turn into client work for up to 24 months, then delete them. If you become a client, we keep the information that is part of that relationship for as long as our contract with you, and any legal or tax obligation that follows it, requires. Server logs are kept only as long as needed for security and troubleshooting, then rotated out.

Who else sees it

We use a small number of service providers to run this website and receive your enquiries: our hosting provider and our email provider. They process information on our instruction and only to the extent needed to provide their service; they do not use it for their own purposes.

Cross-border processing

Some of the providers above may process information on servers outside South Africa. Where that happens, we only use providers that are themselves subject to data-protection laws giving your information a level of protection comparable to POPIA, or that have agreed in writing to protect it to that standard, as required by section 72 of POPIA.

Security

We take reasonable technical and organisational measures to protect the information we hold against loss, unauthorised access and misuse, and we expect the same from the providers we use.

Your rights

Under POPIA you have the right to ask us: what personal information we hold about you; to correct it if it is wrong or out of date; to delete it; and to object to how we use it. To exercise any of these rights, contact us via our contact page. We will respond within a reasonable time and, in any event, within the timeframes POPIA requires.

Complaints

If you are unhappy with how we have handled your personal information, we would like the chance to put it right first: contact us via our contact page. You also have the right to complain directly to South Africa’s Information Regulator, at inforegulator.org.za.

Changes to this policy

We may update this policy from time to time, for example if we change a service provider or if the law changes. The date at the top shows when it was last updated. We encourage you to check back occasionally.