Privacy Policy

Effective date: 16 September 2026

This policy explains how Omni Digital Studio handles personal information, in plain English and in line with the Protection of Personal Information Act, 2013 (POPIA). It applies to this website and to the information you send us through our enquiry form.

1. Who we are

Omni Digital Studio is the working name of a sole proprietorship based in Gauteng, South Africa. We build and maintain websites and digital systems for small and growing businesses.

Under POPIA we are the responsible party for the personal information we collect. Our Information Officer is registered with the Information Regulator (South Africa). You can reach the Information Officer at damian.neveling@gmail.com.

2. What personal information we collect

When you fill in our enquiry form, we collect only what the form asks for:

Your name and business name
Your email address
Your phone or WhatsApp number (optional)
Your budget range and timeline (optional)
Details of your project or enquiry, and anything else you choose to tell us

We do not collect payment details, identity numbers, or any sensitive personal information through this website. We do not use cookies, tracking pixels, or analytics services.

3. Why we collect it and our lawful basis

We use your information only to respond to your enquiry, prepare a quote or proposal, and — if we work together — to deliver the agreed services and communicate with you about the project. This is a reasonable step you have asked us to take before entering into an agreement, and it is necessary for that agreement (sections 11 and 13 of POPIA). We do not sell your information, and we do not currently send any marketing communications.

4. Our form provider — Basin (outside South Africa)

To deliver your enquiry submissions to us, this website uses Basin, a form service operated by Moonshot Ventures Inc., based in British Columbia, Canada. When you submit the form, your information is sent from your browser directly to Basin (over an encrypted connection) and is processed and stored on servers outside South Africa.

Section 72 of POPIA allows personal information to be transferred across borders where appropriate safeguards are in place. Basin acts as a processor on our behalf and publishes its own policies, including its privacy policy, terms of service, and GDPR information. Basin's published sub-processors currently include Cloud 66 (DevOps infrastructure, United States) and CleanTalk (spam screening, European Union). Our form does not enable any captcha services. By submitting the form, you acknowledge that your information is processed through Basin outside South Africa.

5. Who we share your information with

Basin — to receive and forward your enquiry (see section 4).
Service providers — such as email and hosting providers, only where needed to run our business and respond to you.
Where the law requires it — for example to comply with a legal obligation or lawful request from an authority.

We never sell, rent, or trade your personal information with anyone.

6. How long we keep it

We keep enquiry information only as long as reasonably necessary: to respond to your enquiry, to deliver and document any services we provide, and to meet our legal and accounting record-keeping obligations. Enquiries that do not lead to work are not kept indefinitely. When information is no longer needed, we delete or de-identify it. You can ask us what we hold and ask us to delete it at any time (see section 8).

7. How we protect it

Because we can, we keep things simple and safe:

We collect the minimum information needed.
All form submissions travel over an encrypted connection (HTTPS).
Submitted enquiries are only accessible to the business owner.
The website includes a hidden spam-protection field (honeypot).
Our website security is reviewed as part of our operations checks.

No method of transmission or storage is completely secure, but we apply safeguards that are reasonable and appropriate for what we collect.

8. Your rights

Under POPIA you have the right to:

request a copy of the personal information we hold about you (section 23);
ask us to correct or delete information that is wrong, misleading, or no longer needed (section 24);
object to the processing of your information in certain circumstances (section 11);
withdraw any consent you have given us;
complain to the Information Regulator (section 74) if you are unhappy with how we handle your information.

To exercise any of these rights, contact our Information Officer at damian.neveling@gmail.com. We will respond within a reasonable time and may ask you to confirm your identity first. You can also request access to records we hold in terms of the Promotion of Access to Information Act, 2000 (PAIA) — see our PAIA Manual.

The Information Regulator (South Africa) can be contacted at JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001, or at complaints.IR@inforegulator.org.za.

9. Children

Our services are aimed at businesses. We do not knowingly collect the personal information of children under 18. If we learn that we have, we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. The effective date at the top of this page shows when the current version was published. Significant changes will be reflected on this page.

11. Contact

Questions, requests and complaints about how we handle personal information can be sent to damian.neveling@gmail.com (Information Officer, Omni Digital Studio).

← Back to home