Privacy Policy

Who we are

This website is operated by Brandfluctus (Pty) Ltd, trading as Fluctus Design Studio (“Fluctus”, “we”, “us”). We are based in Sandton, South Africa, and we handle personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

Our Information Officer can be reached at [email protected].

What this policy covers

This policy applies to brandfluctus.com and to correspondence that starts from it. It does not cover other websites we link to. Those run their own policies, and we would encourage you to read them.

What we collect

There are no forms on this website. We do not ask you to create an account, and we do not sell anything through the site. In practice that leaves three ways we end up holding information about you.

• You email us. We then hold whatever you chose to put in that email, usually your name, your email address and what you want to talk about.
• You book a call. Our booking page is hosted by Microsoft Bookings. You give it your name and email address, and sometimes a phone number and a note about your enquiry. Microsoft processes that on our behalf.
• Your browser requests a page. Like every web server, ours receives technical information in order to send you the page: your IP address, your browser and device type, the page requested and the time of the request. This is handled by Cloudflare, which hosts and delivers the site.

Cookies and tracking

This site sets no advertising or tracking cookies, and runs no third-party advertising pixels. Cloudflare may set strictly necessary cookies for security and performance. Those keep the site available and protect it from abuse. They do not profile you.

If we add analytics later, this page will be updated to say so, and where the law requires your consent we will ask for it first.

Why we process it

• To answer an enquiry you sent us, which we do at your request.
• To arrange and run a call you booked.
• To keep this website online, fast and protected from abuse.
• To meet obligations under tax, company and other applicable law.

We do not use your information for automated decision-making or profiling, and we do not add you to a marketing list without your agreement.

Who we share it with

Only the service providers we need in order to operate, each acting as an operator under POPIA:

• Cloudflare — hosting and delivery of this website.
• Microsoft — Microsoft 365 for our email and files, and Microsoft Bookings for appointment scheduling.

We do not sell your personal information, and we do not hand it to third parties for their own marketing.

Information leaving South Africa

Cloudflare and Microsoft both operate globally, so delivering this site and running our email may involve your information being processed outside South Africa. POPIA permits this where the recipient is subject to comparable protection or is bound by contract to provide it, which is the case with both providers.

How long we keep it

• Enquiries and correspondence: while the conversation is live, and then up to three years, because enquiries often come back around.
• Client project records: for the engagement, and then for as long as tax and company law requires business records to be kept.
• Server logs: short retention periods set by Cloudflare, generally days rather than months.

Your rights under POPIA

You are entitled to ask us what personal information we hold about you, to have it corrected or deleted, to object to our processing of it, and to withdraw a consent you previously gave. Write to [email protected] and we will respond within a reasonable time. We may need to confirm who you are before we act.

If you are not satisfied with how we handled it, you can complain to the Information Regulator of South Africa at inforegulator.org.za.

Security

This site is served over HTTPS. Our email and files sit in Microsoft 365, with access limited to the people who need it. No system is perfect and we will not pretend otherwise, but if a breach affected your personal information we would notify you and the Information Regulator, as POPIA requires.

Children

This site is aimed at businesses. We do not knowingly collect personal information from children.

Changes to this policy

We will update this page when the way we work changes, and the date at the top will change with it.

Contact

Brandfluctus (Pty) Ltd, Sandton, South Africa.
[email protected]