Privacy Policy

1. Introduction

Elevate Creative Agency ("we", "us", "our") is a South African creative and digital marketing agency registered under registration number 2026/443415/07. We are committed to protecting your personal information and respecting your privacy in accordance with the Protection of Personal Information Act (POPIA), Act No. 4 of 2013.

This Privacy Policy explains what personal information we collect, how we use it, and your rights in relation to that information.

2. Information We Collect

We may collect the following categories of personal information:

• Contact information — name, email address, phone number, and business name when you submit an inquiry through our website or WhatsApp.
• Communication history — records of correspondence between you and our team, including emails, WhatsApp messages, and meeting notes.
• Project information — information you provide about your business, brand, or project during our engagement.
• Technical information — basic website analytics such as pages visited and general location (city/country level), collected in an anonymised form.

3. How We Use Your Information

We use your personal information for the following purposes:

• To respond to your inquiries and provide the services you request
• To communicate with you about ongoing projects and engagements
• To send you relevant updates, insights, or offers (only with your explicit consent)
• To improve our services and website experience
• To comply with legal and regulatory obligations

4. Legal Basis for Processing

We process your personal information based on one or more of the following lawful grounds:

• Consent — where you have actively agreed to us processing your data (e.g. marketing communications)
• Contract — where processing is necessary to deliver a service you have engaged us for
• Legal obligation — where we must process data to comply with South African law
• Legitimate interest — where processing is necessary for our operations and does not override your rights

5. How We Store and Protect Your Information

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, or disclosure. This includes:

• Encrypted storage of customer databases
• Password-protected access to systems containing personal data
• Two-factor authentication on business accounts
• Restricted access on a need-to-know basis
• Regular review of security practices

While we take these measures, no online transmission or storage system is 100% secure. We cannot guarantee absolute security, but we work continuously to minimise risk.

6. Sharing Your Information

We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

• Service providers — trusted third parties who assist us in operating our business (e.g. email delivery, hosting), all bound by confidentiality agreements
• Legal requirements — where required by South African law or a valid legal request
• Business transfers — in the event of a business sale or merger, with equivalent protections in place

7. Your Rights Under POPIA

You have the following rights regarding your personal information:

• Right to access — request a copy of the personal information we hold about you
• Right to correction — ask us to correct inaccurate or incomplete information
• Right to deletion — request that we delete your personal information, subject to legal retention requirements
• Right to object — object to processing of your data for direct marketing or other purposes
• Right to withdraw consent — withdraw any consent you have previously given
• Right to lodge a complaint — with the South African Information Regulator

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable time, typically within 30 days.

8. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. When your data is no longer needed, we securely delete or anonymise it.

9. Cookies and Website Analytics

Our website may use cookies to enhance your experience. For details on how we use cookies and how you can control them, please see our Cookie Policy.

10. Children's Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will delete it promptly.

11. International Data Transfers

Some of our service providers may be located outside South Africa. Where personal information is transferred internationally, we ensure appropriate safeguards are in place to protect your data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on this page, with the "Last updated" date shown at the top. Material changes will be communicated through our website or by email where appropriate.

13. Complaints

If you believe we have not handled your personal information in accordance with POPIA, you have the right to lodge a complaint with the Information Regulator:

The Information Regulator (South Africa)
Website: inforegulator.org.za
Email: [email protected]

14. Contact Us

For any questions or concerns about this Privacy Policy or our data practices, please contact us:

Elevate Creative Agency
Email: [email protected]
Phone: +27 82 626 6589
Registration: 2026/443415/07
South Africa