Privacy Policy

Effective 16 September 2026

1. Responsible party

Stephen Wilson, sole proprietor, Johannesburg, South Africa, is the responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA). I am also the information officer. Contact: stephen@stephenwilson.africa.

2. What I collect

Information you give me: your name, email address, telephone number, company, and whatever you write in an enquiry.

Information collected automatically: standard server logs and basic analytics — pages visited, approximate location, device and browser type, referring site. No advertising trackers.

3. Why I collect it

To answer enquiries and correspond with you. To scope, quote and carry out work you ask for. To keep the site running and understand how it is used. To meet legal obligations. I do not sell personal information and I do not send marketing without your consent.

4. Lawful basis

Processing is justified under POPIA by your consent, by the steps needed to enter or perform a contract with you, by legal obligation, or by my legitimate interest in running a design practice — whichever applies.

5. Who sees it

Service providers who host the site, handle email and provide analytics, under terms that require them to protect your information. Professional advisers where needed. Authorities where the law requires. No one else.

6. Cross-border transfer

Some service providers store data outside South Africa. I use providers whose protections are substantially similar to POPIA, as section 72 requires.

7. Cookies

The site uses cookies only where needed for it to work and for basic analytics. You can block cookies in your browser; the site will still work.

8. How long I keep it

Enquiry correspondence for as long as needed to deal with it and for a reasonable period afterwards in case it leads to work. Project records for the life of the project and the period required by law or by my professional and tax obligations. Logs and analytics for a limited period.

9. Security

I take reasonable technical and organisational steps to protect personal information against loss, unauthorised access and misuse. If a breach is likely to affect you, I will notify you and the Information Regulator as POPIA requires.

10. Your rights

You may ask what personal information I hold about you, ask me to correct or delete it, object to processing, or withdraw consent. Write to stephen@stephenwilson.africa. I may ask you to confirm your identity first. You may also complain to the Information Regulator (South Africa): complaints.IR@justice.gov.za, www.justice.gov.za/inforeg.

11. Children

The site is not directed at children under 18 and I do not knowingly collect their information.

12. Changes

I may update this policy. The effective date at the top tells you which version applies.