Privacy Policy

The short version

When you contact us, we get what you send: your name, your email address, and anything else you choose to tell us. We use it to reply to you and, if we work together, for the project.
This site sets no cookies, and runs no analytics, advertising or tracking code.
We never sell your details.
You can ask what we hold about you, and have it corrected or deleted.

Who's responsible for your information

NEW CREATION STUDIO (PTY) LTD, registration number 2026/629924/07, trading as New Creation Studio, is the responsible party for your information under the Protection of Personal Information Act, 2013 (POPIA).

Address: address, to confirm
Email: email address
Information Officer: Luke Walter-Girout

What we collect

When you send the contact form: your name and email address, and anything else you choose to give us, such as a phone number, your business's name, what you need and your message.

When you email us or message us on WhatsApp, we get whatever you send.

When you're just looking around, we collect nothing. Cloudflare, which hosts the site, handles your IP address to deliver the pages and protect the site from attacks, as any web host does.

We don't collect ID numbers, bank or card details, or any special personal information (POPIA's term for things like your health, beliefs or biometrics) through this site.

What we use it for

To reply to you, and to quote for the work you ask about.
If you become a client: to do the work we've agreed, and to invoice for it.
To keep the business records the law requires.
To keep the site and its form safe from abuse.

That's all. We don't send you marketing unless you've asked to hear from us, and you can stop it at any time. We don't sell, rent or trade your details, and we don't use them to make automated decisions about you.

Who else sees it

Cloudflare hosts this website and delivers what you send through the form to our inbox. Its Turnstile check on the form makes sure a person, not a program, is sending it. To do that it reads technical details of your connection and browser, such as your IP address and what your browser says about itself, and Cloudflare also uses them to improve that check, as its Turnstile privacy addendum explains.
our email provider holds the messages you send us, and our replies.
Our accountant, and SARS and CIPC where the law requires it, see client records such as invoices.
The authorities, only when the law requires it.

Outside South Africa

Cloudflare works worldwide, so your details may be handled outside South Africa. That happens only as far as running the site and its form needs it, and only with providers bound by laws or agreements that protect your information as POPIA does (section 72).

On your device

This site sets no cookies, and runs no analytics, advertising or tracking code. It keeps one note in your browser: whether the rose window on the home page has already built itself during this visit, so it doesn't build again on every page. The note is forgotten when you close the tab, and it never reaches us.

On the contact page, Cloudflare's Turnstile check runs in your browser, under Cloudflare's own privacy policy.

How long we keep it

Enquiries that don't lead to work: up to 24 months, and then we delete them.
Client records, such as agreements and invoices: seven years, as the Companies Act requires.
Emails and messages: as long as we need them to help you and to keep our records.

The contact form doesn't store anything on this site: it sends your message to our inbox, and that's where it's kept.

Keeping it safe

Every page is served over an encrypted connection (HTTPS).
Only we can open our inbox and our records, and our accounts are protected with strong passwords and two-step sign-in.
If your details are ever exposed, we'll tell you and the Information Regulator, as POPIA requires.

Your rights

Under POPIA you can:

ask whether we hold information about you, and for a copy of it
ask us to correct it, or to delete whatever we're not required to keep
object to how we use it
withdraw any consent you've given, such as to hear from us
complain to the Information Regulator

To do any of these, email email address. We'll reply within 30 days, and we may ask you to show it's you before we hand anything over. We don't charge for this.

Information Regulator: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
Complaints: POPIAComplaints@inforegulator.org.za · 010 023 5200
Website: inforegulator.org.za

Children

This site isn't aimed at children, and we don't knowingly collect their information. If you think we have, tell us and we'll delete it.

Changes

When this policy changes, so does the date at the top.