This site collects very little, and we would rather explain it in plain language than bury it in clauses. If anything below is unclear, email us and ask.
Who we are
Zaaka is a design and engineering studio based in Johannesburg, South Africa. This policy covers zaaka.io only. It does not cover the products we build for clients — each of those has its own policy, and the client is the responsible party for the data inside it, not us.
What we collect
Two things, and nothing else.
- What you send us. If you email us or use the contact page, we hold your message and whatever is in it — usually a name, an email address and a description of your project. We hold it because you chose to send it.
- Server logs. Our host records the standard request log for every visit: IP address, browser and operating system, the page requested, and the time. This is ordinary web-server operation and is used to keep the site up and to investigate abuse. We do not analyse it to build a picture of you.
We do not run advertising trackers, marketing pixels, session recorders, or third-party analytics on this site. There is no newsletter list, so there is nothing to unsubscribe from.
Cookies
This site sets no cookies for visitors. WordPress sets cookies only for logged-in administrators, which means us. That is why there is no cookie banner — adding one would be theatre.
Why we may hold it, and for how long
Enquiries are kept so we can reply to you and, if we end up working together, so we have a record of what was agreed. If a conversation goes nowhere we delete the correspondence within twelve months. If it becomes a project, we keep the records as long as we are legally required to keep business records, and no longer. Server logs are rotated by our host on their own schedule, typically within a few weeks.
Under POPIA we process this on the basis of your consent and our legitimate interest in responding to an enquiry you sent us. If you are in the UK or EU, the equivalent UK GDPR and GDPR bases are consent and legitimate interest.
Who else sees it
Nobody we have not had to involve. Two suppliers necessarily touch this data as part of running the site and our email, and neither is permitted to use it for anything of their own:
- Our hosting provider, which stores the site and its logs.
- Our email provider, which delivers and stores our correspondence.
We do not sell personal information, and we do not share it for anyone else’s marketing. Some of these suppliers operate servers outside South Africa, which means your data may be processed abroad under contractual terms that require an equivalent standard of protection.
Your rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email us and we will do it — there is no form and no fee. We will confirm in writing once it is done.
If you are not satisfied with how we have handled a request, you can complain to the Information Regulator of South Africa at inforegulator.org.za. If you are in the UK or EU, you may complain to your own supervisory authority instead.
Security
The site is served over HTTPS. Administrator accounts are limited to the people who need them. We will not pretend this is a guarantee — no system is — but if we ever became aware of a breach affecting your information, we would tell you and the Regulator rather than hope it went unnoticed.
Contact
Questions, requests and complaints all go to the same place: hello@zaaka.io. We reply within one working day.
Changes
If we add anything that changes what is collected — an analytics tool, a hosted contact form, a booking widget — we will update this page before it goes live, not after, and change the date below.