Privacy Policy

1. Who we are

Dube AI ("we", "us", "our") is a web design, SEO and AI agency based in South Africa, operating the website at dube-ai.com. For the purposes of POPIA, we are the responsible party for the personal information described in this policy. You can reach us at {{EMAIL}}, on {{PHONE_DISPLAY}}, or at {{ADDRESS_LINE}}.

2. What information we collect

We only collect what we need to answer your enquiry and run our business. That includes:

• Information you give us. When you complete a contact or quote form, message us on WhatsApp, or email us, we receive your name, email address, phone number, the country you are in, and whatever details you choose to share about your business and what you need.
• Information collected automatically. When you visit the site, our systems and analytics tools may record your IP address, browser type, device, the pages you view, and how you arrived. This is standard website usage data.
• Cookies. We use cookies to make the site work, to understand how it is used, and where you have consented, for analytics and marketing. You control these through our cookie banner. See section 8.

We do not knowingly collect information from children, and we do not collect special categories of personal information (such as health, religion or biometrics) through this website.

3. Why we collect it and our lawful basis

Under POPIA we must have a lawful reason for processing your information. Ours are:

• To respond to your enquiry and quote your work. When you contact us, we process your details to reply, prepare a quote and, if you proceed, deliver the project. This is necessary to take steps at your request and to perform our contract with you.
• To run and improve our business. We use usage data to keep the site working, secure and useful. This is our legitimate interest, balanced against your rights.
• With your consent. For non-essential cookies and any marketing communication, we rely on the consent you give, which you can withdraw at any time.
• To meet legal obligations. Tax, accounting and other records we are required by law to keep.

4. How we share information

We do not sell your personal information, ever. We share it only where necessary to run the service:

• Service providers ("operators" under POPIA) who process information on our behalf under contract, such as our hosting provider, email provider, analytics tools and the platform that runs our AI assistant. They may only use the information to provide their service to us.
• Where the law requires it, for example a lawful request from a regulator or court.

Some of these providers operate outside South Africa. Where your information is transferred across a border, we take reasonable steps to ensure it receives a level of protection comparable to POPIA, as the Act requires.

5. How long we keep it

We keep enquiry information only as long as we need it. If you become a client, we keep your records for the duration of our work together and for as long afterwards as the law requires us to (for tax and accounting, this is typically five years). If you enquire but do not proceed, we remove or anonymise your enquiry once it is clear there is no project, unless you have asked to stay in touch.

6. How we protect it

We take security seriously because it is part of what we sell. Reasonable technical and organisational measures we use include encryption in transit (SSL), access controls, two factor authentication on our own accounts, regular updates, monitoring and off-site backups. No system is perfectly secure, but we treat your information the way we would want ours treated. If a breach ever affects your information, we will notify you and the Information Regulator as POPIA requires.

7. Your rights under POPIA

You have the right to:

• Ask what personal information we hold about you and request a copy.
• Ask us to correct or update information that is wrong or incomplete.
• Ask us to delete information we no longer have a lawful reason to keep.
• Object to processing based on our legitimate interests.
• Withdraw consent at any time, where we relied on your consent.
• Complain to the Information Regulator if you believe we have mishandled your information.

To exercise any of these, email us at {{EMAIL}}. We will respond within a reasonable time and at no charge for a first request. Our Information Officer is {{INFO_OFFICER}}.

You can contact the Information Regulator of South Africa at inforegulator.org.za.

8. Cookies

Cookies are small files a website stores on your device. We use essential cookies to make the site function, and, only with your consent, analytics and marketing cookies to understand how the site is used and to reach the right audiences. When you first visit, our cookie banner lets you accept or reject non-essential cookies, and you can change your choice at any time through the banner. Rejecting non-essential cookies will not stop the site working.

9. Third-party links

Our site links to other websites, such as Google, WhatsApp and technical resources. We are not responsible for their privacy practices, and we encourage you to read their policies when you follow a link.

10. Changes to this policy

We may update this policy as our business or the law changes. The date at the top shows when it was last revised. Material changes will be made clear on this page.

11. Contact us

Questions about this policy or your information are welcome. Email {{EMAIL}}, call {{PHONE_DISPLAY}}, or write to us at {{ADDRESS_LINE}}.