Privacy Policy

Last updated: 1 July 2026

1. Introduction

Digital Brand Labs (Pty) Ltd ("Digital Brand Labs", "we", "us", or "our") is committed to protecting your privacy and personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable South African legislation.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website at digitalbrandlabs.co.za, use our services, or otherwise interact with us.

2. Responsible Party

The responsible party for the processing of your personal information is:

3. Personal Information We Collect

We may collect and process the following categories of personal information:

  • Identity information: Name, surname, job title, company name
  • Contact information: Email address, phone number, physical address
  • Technical information: IP address, browser type, device information, pages visited, referring URL
  • Communication information: Records of correspondence when you contact us via our website, email, WhatsApp, or phone
  • Service information: Details about the services you enquire about or purchase from us

4. How We Collect Personal Information

We collect personal information through:

  • Our website contact forms and enquiry forms
  • WhatsApp communications
  • Email correspondence
  • Phone calls
  • Cookies and similar tracking technologies (see our Cookie Policy)
  • Google Analytics and similar analytics tools
  • Social media platforms when you interact with our pages

5. Purpose of Processing

We process your personal information for the following lawful purposes:

  • To respond to your enquiries and provide you with information about our services
  • To provide and deliver the digital marketing services you have contracted
  • To send you service-related communications (e.g., project updates, reports, invoices)
  • To improve our website, services, and user experience
  • To analyse website traffic and usage patterns
  • To comply with legal obligations
  • To protect our legitimate business interests

6. Legal Basis for Processing

We process your personal information on one or more of the following legal bases under POPIA:

  • Consent: Where you have given us explicit consent (e.g., filling in a contact form)
  • Contract: Where processing is necessary for the performance of a contract with you
  • Legitimate interest: Where processing is necessary for our legitimate business interests, provided your rights are not overridden
  • Legal obligation: Where processing is required by law

7. Sharing of Personal Information

We do not sell your personal information. We may share your information with:

  • Service providers: Third-party tools we use to deliver our services (e.g., hosting providers, analytics platforms, email services). These providers are bound by confidentiality agreements.
  • Legal requirements: When required by law, regulation, or legal process
  • Business transfers: In connection with a merger, acquisition, or sale of assets

8. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact form submissions and client project data are retained for the duration of our business relationship and for a reasonable period thereafter for record-keeping purposes.

9. Your Rights Under POPIA

As a data subject under POPIA, you have the right to:

  • Access: Request confirmation of whether we hold your personal information and request access to it
  • Correction: Request the correction or updating of your personal information
  • Deletion: Request the deletion of your personal information where it is no longer necessary
  • Objection: Object to the processing of your personal information for direct marketing purposes
  • Complaint: Lodge a complaint with the Information Regulator (South Africa)

To exercise any of these rights, please contact us at [email protected].

10. Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, or destruction. These measures include encrypted data transmission (SSL/TLS), secure hosting infrastructure, and access controls.

11. Cross-Border Transfers

Some of our service providers may process data outside of South Africa. Where this occurs, we ensure that adequate safeguards are in place to protect your personal information in accordance with POPIA requirements.

12. Information Regulator

If you are not satisfied with how we handle your personal information, you may lodge a complaint with:

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us: