Privacy Policy

Broadbrand, a business of Digital Solutions Group (DSG, registration number 1999/812/07), is committed to protecting your privacy. This policy explains what personal information we collect when you use broadbrand.ai, why we collect it, who we share it with and what you can ask us to do about it.

We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) of the Republic of South Africa. This policy covers this website only. Other Digital Solutions Group websites publish their own policies.

When you send us a brief through our contact form, you choose to give us:

• Your name
• Your email address
• Your company name
• Your phone number
• What you need help with, your budget range and your timeline
• The content of the brief you write

Separately, and whether or not you contact us, our website and its hosting infrastructure collect some technical information automatically: your IP address, browser type and version, the pages you visit, how long you spend on them and the site you arrived from.

Directly from you, when you fill in the contact form. Automatically, through cookies and server logs, when you browse the site. We do not buy personal information from third parties and we do not scrape it.

• To reply to your enquiry and discuss the work you are asking about
• To provide the services you go on to engage us for
• To understand how the site is used, so we can improve it
• To keep the site secure and to detect abuse, including form spam
• To meet our legal and regulatory obligations

We do not sell your personal information, and we do not use the contact details you give us for unrelated marketing.

Under POPIA we rely on one or more of the following grounds:

• Your consent, which you give by submitting the form or accepting cookies
• The performance of a contract, or steps taken at your request before entering one
• Our legitimate interests in running and securing this website
• Compliance with an obligation imposed by law

We use a small number of service providers, and each one only receives what it needs:

• Vercel hosts this website and processes server logs, which include IP addresses and request metadata.
• smtp.com delivers the notification email that carries your brief to us.
• Google Analytics measures how the site is used, but only after you accept non-essential cookies. See section 10.
• Google Fonts serves the typefaces the site uses, and your browser may request font files from Google servers, which may log your IP address.

Your brief is delivered to us by email. It is not written to a database on this site.

Some of the providers above operate servers outside South Africa, including in the United States and the European Union. Where personal information is transferred across a border, we take reasonable steps to ensure it receives protection substantially similar to POPIA, through contractual protections and the providers' own adherence to recognised data protection frameworks.

We keep contact enquiries for a maximum of two years from your last contact with us, unless we have an ongoing business relationship or a legal reason to keep them for longer. Technical data such as analytics and server logs is kept only for as long as it is useful for the purpose in section 4, after which it is deleted or aggregated so it no longer identifies you.

You have the right to:

• Ask what personal information of yours we hold, and get a copy of it
• Ask us to correct information that is wrong, misleading or out of date
• Ask us to delete information we no longer have grounds to keep, or that we obtained unlawfully
• Withdraw your consent, at any time, without having to give a reason
• Object to processing we carry out on the basis of legitimate interests
• Complain to the Information Regulator, as set out in section 14

To exercise any of these, write to us using the details in section 11. We will respond within a reasonable period, and we may need to confirm who you are before we act.

A cookie is a small text file that your browser stores on your device when you visit a website. We use two kinds.

Essential cookies are needed for the site to work at all, and for remembering the cookie choice you made so we do not ask you again on every page.

Analytics cookies are set by Google Analytics and tell us which pages people read, how long they stay and where errors happen. These are switched off until you accept them. Until you do, Google Analytics runs in a mode where it stores nothing on your device.

You will see a banner asking about non-essential cookies the first time you visit. You can also clear or block cookies in your browser settings at any time, usually under Help, Preferences or Settings. Blocking essential cookies may stop parts of the site working.

Broadbrand has an Information Officer as POPIA requires. For anything to do with your personal information or this policy:

• Email: hello@broadbrand.ai
• Johannesburg: 15 6th Street, Parkhurst, Johannesburg, South Africa
• Cape Town: 15 Edison Way, Century City, Cape Town, South Africa

The site is served over HTTPS, access to systems that hold personal information is limited to people who need it, and our providers are chosen partly on their own security posture. No system is perfectly secure, so we cannot promise absolute security, but we take the steps a business of our size reasonably should.

We may update this policy as the site or the law changes. The date at the top always reflects the last substantive change. Where a change materially affects how we handle your information, we will make that clear rather than quietly amending the text.

If you are unhappy with how we have handled your personal information, please tell us first using the details in section 11, so we have a chance to put it right. You also have the right to complain directly to the regulator:

• The Information Regulator (South Africa)
• Email: enquiries@inforegulator.org.za
• Phone: +27 10 023 5200