Privacy & cookies
Your information deserves care.
Pre-publication draft: Fields marked confirmation required must be completed and this notice reviewed against actual business practices before launch. A website alone cannot establish POPIA compliance.
1. Who is responsible
Creation Dynamix, legal entity confirmation required, is the responsible party for personal information processed through this website. Our principal place of business, registration number and Information Officer details must be inserted before publication.
Privacy contact: email required
Information Officer: name and registration status required
Business address: required
2. What we collect and why
| Information | Purpose | Proposed lawful basis |
|---|---|---|
| Name, email, project selections and message | Respond to enquiries, prepare proposals and provide requested services. | Steps requested before a contract; contract performance; legitimate interests where appropriate. |
| Transaction and order records | Fulfil orders, reconcile payments, prevent fraud and meet accounting duties. We do not intend to store full card details. | Contract performance and legal obligations. |
| Server logs, IP address and security events | Keep the website available, investigate abuse and secure systems. | Legitimate interests and legal duties. |
| Optional analytics identifiers | Understand aggregated site use and improve performance. | Consent where required. No analytics provider is installed in this release. |
| Marketing contact details | Send requested updates or permitted customer communications. | Consent or the limited existing-customer basis permitted by law, with opt-out. |
We do not knowingly seek special personal information or children’s information through this website. Do not include unnecessary confidential or sensitive material in an initial enquiry.
3. Recipients and service providers
Information may be processed by contracted hosting, email, security, file-storage, professional, fulfilment and payment service providers where necessary. Creation Dynamix remains responsible for selecting providers and must put appropriate written operator or data-processing terms in place. The actual provider list and any processing outside South Africa must be documented before launch.
4. Retention
We retain information only as long as justified by the stated purpose, contractual requirements, disputes and applicable legal obligations. Final periods must be approved in a documented retention schedule. Proposed starting points—not confirmed legal periods—are: unsuccessful enquiries for 12 months, client/project records for the contractual relationship plus the applicable claims period, and financial records for the period required by tax and company law.
5. Security and incidents
Controls for this release include HTTPS enforcement, restrictive browser security headers, reduced third-party scripts, server-side form validation and no local card collection. Security is a continuing operational obligation. Access control, backups, patching, malware monitoring, incident response and provider security must also be maintained. Where required, affected people and the Information Regulator will be notified of a security compromise as soon as reasonably possible.
6. Your rights
Subject to applicable law, you may ask whether we hold your information, request access or correction, object to certain processing, withdraw consent, request deletion where retention is not required, and complain to the Information Regulator. We may need to verify your identity and may lawfully refuse or limit a request in specified circumstances.
Information Regulator (South Africa): consult the current contact and complaint process at inforegulator.org.za.
7. Cookies and local storage
| Item | Type | Purpose | Duration |
|---|---|---|---|
| cd-cookie-consent-v1 | Essential browser local storage | Records your privacy preference on this device. | Until browser storage is cleared or this notice version changes. |
This release does not install advertising or analytics cookies. If optional tools are introduced, they must remain disabled until the relevant choice is made, and this table must be updated. You can reopen Cookie settings in the site footer.
8. Direct marketing
An enquiry does not automatically subscribe you to marketing. Any future electronic marketing process must record the applicable basis, identify the sender and provide a working, free opt-out. Withdrawing marketing consent will not stop necessary project or transaction messages.
9. Updates
Effective date: set at launch. Material changes will be identified by updating this date and, where appropriate, notifying affected people or requesting a new choice.