Your information, handled with care.
This notice explains how Brand Experts (Pty) Ltd uses personal information when you visit our websites, buy a plan or contact us. Last updated 19 October 2026.
Draft for launch. [REVIEW NEEDED BY POPIA attorney / Information Officer]
1. Who we are
Brand Experts (Pty) Ltd (registration 2020/130608/07), Centurion, Gauteng, is the responsible party for personal information collected on brandexperts.co.za and our sign-up, checkout and portal pages.
When we build and run websites, CRMs and automations for our clients, our client is the responsible party for their customers' information and we act as their operator under a written agreement.
2. What we collect
- Contact details: name, email, phone or WhatsApp number, business name, when you book a call, request a quote, sign up or buy.
- Order and billing details: plans bought, invoices and payment status. Card details are entered on our payment provider's secure page (PayFast, or Paddle for international software plans) and are never stored by us.
- Website set-up content: the answers, logos, photos and text you give us to build your site.
- Consent records: what you agreed to, when and for what purpose.
- Technical data: basic security logs (for example a one-way hash of your IP address to prevent abuse). Analytics only after you accept cookies.
We do not ask for special personal information (such as health information) on our own forms. Do not include it in messages to us.
3. Why we use it
- To respond to your enquiry, book the call or prepare the quote you asked for (your consent).
- To set up, deliver, support and bill the services you buy (performance of a contract).
- To keep our systems secure and prevent fraud (legitimate interest).
- To meet tax, accounting and legal obligations (legal obligation).
- To send occasional tips and offers, only if you opted in. Every message has an opt-out (POPIA section 69).
5. Information sent outside South Africa
Some providers (for example the CRM platform and Vista Social) store data in the United States or other countries. We only use providers bound by agreements or laws that give protection substantially similar to POPIA, as section 72 requires, and we tell you here which ones they are. Where we can choose a South African region, we do.
7. How long we keep it
Enquiries that do not become clients: up to 12 months. Client and billing records: 5 years after the relationship ends (tax and accounting rules). Consent records: as long as needed to prove consent. Then we delete or de-identify it. [REVIEW NEEDED BY POPIA attorney (retention periods)]
8. How we protect it
Encryption in transit, multi-factor sign-in for staff, role-based access, audit logs, and regular security reviews. If a breach affects you, we will notify you and the Information Regulator as POPIA section 22 requires.
9. Your rights
- Ask what information we hold about you and get a copy.
- Ask us to correct or delete it.
- Object to processing, and withdraw consent at any time (this does not affect earlier processing).
- Opt out of direct marketing.
- Complain to the Information Regulator.
Our PAIA manual explains how to request records. [REVIEW NEEDED BY Information Officer (publish PAIA manual link)]
10. Contact and complaints
Information Officer: Tshepo Mokitimi [REVIEW NEEDED BY Information Officer (confirm registration with the Information Regulator)]
Email: info@brandexperts.co.za
Address: Centurion, Gauteng
If you are not satisfied with our response you may complain to the Information Regulator (South Africa): inforegulator.org.za.
See also our terms.