Privacy Policy

Overview

Supernatural Creative is a small creative agency based in South Africa. This policy covers two areas: how we handle information collected through our website, and how we handle data when working within client environments on a per-engagement basis. We operate in compliance with the Protection of Personal Information Act (POPIA) and, where applicable for UK and EU clients, the General Data Protection Regulation (GDPR).

1. Website Information We Collect

When you submit our contact form, we collect:

• Your name
• Email address
• Phone number
• Company name
• Your message to us

We use this information solely to respond to your inquiry and communicate with you about our services. We will not use your information for marketing purposes unless you explicitly consent to this separately.

2. Client Engagement Data

When working within a client's environment or on a client's systems, the data we access, process, or handle is governed on a per-engagement basis. We do not collect, store, or use client data beyond what is strictly necessary to fulfil the agreed scope of work. Specific data handling obligations are agreed upon with each client prior to commencing work and may be documented in a separate data processing agreement where required.

For UK and EU-based clients where GDPR applies, we ensure that any data processing activities use compliant tools and cloud infrastructure, such as AWS, and we are willing to enter into a formal Data Processing Agreement (DPA) upon request.

3. Data Storage and Security

Website contact information is transmitted securely and stored using industry-standard security measures. We retain your contact information only as long as necessary to respond to your inquiry and for legitimate business purposes.

For client engagements, data is handled in accordance with the security requirements agreed upon with each client. We use approved and compliant tools for data transfer and storage, and access to client data is limited to team members with a direct need for it.

4. Third-Party Services

We use Resend to send emails from our website contact form. Your information is transmitted to this service solely for the purpose of delivering our response to you.

For client engagements, we may use third-party tools or platforms as required by the project. Where these involve processing client data, we ensure the tools used meet applicable compliance standards. We do not sell or share personal information with third parties for marketing purposes.

5. Your Rights

Under POPIA and, where applicable, GDPR, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of your personal information
• Object to or restrict processing of your personal information
• Withdraw consent at any time
• Lodge a complaint with the relevant supervisory authority

To exercise any of these rights, please contact us at elijah@supernaturalcreative.co.za

6. Changes to This Policy

We may update this privacy policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page.

Contact Us

If you have questions about this privacy policy, please contact us at: