1. Who is responsible
For the purposes of the Protection of Personal Information Act 4 of 2013 (POPIA), the responsible party is:
- Trading name: Buk Digital
- Email: bukasa.get@gmail.com
- Telephone: +27 64 649 5045
- Website: www.bukdigital.co.za
- Country: South Africa
Privacy queries go to bukasa.get@gmail.com.
2. What we collect
We collect only what we need to answer you and deliver our services.
When you book a session
- Your name
- Email address
- Phone number
- Company name, if you give one
- The service you are interested in
- Your preferred date and time
- The project brief you write
- Whether you opted in to marketing
When you use the contact form
- Your name
- Email address
- Phone number
- Your message
- Whether you opted in to marketing
Automatically
Our hosting provider keeps standard server logs, which include IP addresses and browser details, to run and secure the site. We do not use analytics or advertising trackers on this site.
We do not ask for or store banking details, card numbers or identity-document numbers through this website.
3. Why we use it, and on what basis
| Purpose | Lawful basis under POPIA |
|---|---|
| Responding to your enquiry and scheduling sessions | Steps to conclude or perform a contract with you (section 11(1)(b)) |
| Delivering, hosting and supporting the services you buy | Performance of our contract (section 11(1)(b)) |
| Invoicing, accounting and tax records | Compliance with a legal obligation (section 11(1)(c)) |
| Keeping the website and our systems secure | Our legitimate interests (section 11(1)(f)) |
| Sending marketing updates | Your consent, which you can withdraw at any time (section 69) |
Marketing is always optional. You can submit any enquiry or booking without agreeing to receive marketing, and we will not treat an enquiry as consent.
4. Who we share it with
We do not sell your personal information. We share it only with the service providers that run this site and our operations:
| Provider | What it handles |
|---|---|
| Vercel | Website hosting and server logs |
| Google (Calendar) | Booking details are written into a calendar event so we can prepare for your session |
| Google (Gmail) | Sending your confirmation email and notifying us of your enquiry |
We may also disclose information where the law requires it, or to establish or defend a legal claim.
5. Information sent outside South Africa
Some of the providers above, including Vercel and Google, process information on servers outside South Africa. POPIA permits these transfers where the recipient is subject to laws or binding agreements providing comparable protection, and these providers contract on terms that require it. By using this website you understand that your information is processed in this way.
6. Cookies and tracking
This site does not set tracking or advertising cookies. Our forms work without them.
7. How long we keep it
| Information | Retention |
|---|---|
| Enquiries that do not become projects | Up to 12 months, then deleted |
| Booking and calendar records | Up to 12 months after the session |
| Client contracts and project records | For the engagement, then as long as legally required |
| Invoices and accounting records | Five years, as required by South African tax law |
| Marketing contacts | Until you unsubscribe or ask us to delete them |
| Server logs | Short retention periods set by our hosting provider |
Where another law requires us to keep a record, we keep it for that period even if you ask for deletion, and we will tell you when that applies.
8. How we protect it
We use reasonable technical and organisational safeguards, including encrypted connections (HTTPS) across the site, access controls and multi-factor authentication on the accounts that hold client data, credentials kept outside our source code, and limiting access to people who need it. No system is completely secure, and we cannot guarantee absolute security.
If a security compromise affects your personal information, we will notify you and the Information Regulator as POPIA requires.
9. Your rights
You may ask us to:
- Confirm what personal information we hold about you
- Give you a copy of it
- Correct or update it
- Delete it, where no law requires us to keep it
- Stop using it for a particular purpose
- Stop sending you marketing
Email bukasa.get@gmail.com and we will respond within a reasonable time. We may ask you to confirm your identity first. Requests are free, except that a fee may apply to a formal access request under PAIA, as set out in our PAIA Manual.
10. Complaints
Please raise concerns with us first. If you are not satisfied, you may complain to the Information Regulator of South Africa, whose current contact details and complaint forms are published at inforegulator.org.za.
11. Changes to this policy
We may update this policy as our services change. The date at the top shows when it last changed. Where a change materially affects how we use your information, we will tell you.