Privacy Policy

1. Introduction

Burgundy Blue Media (Pty) Ltd (“Burgundy Blue Media”, “we”, “our”, or “us”) is committed to protecting your personal information. We are the responsible party under the Protection of Personal Information Act 4 of 2013 (“POPIA”) in respect of all personal information we process in connection with this website.

This Privacy Policy explains what personal information we collect when you visit burgundybluemedia.com or submit an application to work with us, how we use and protect that information, and what rights you have in relation to it. Please read this policy carefully.

By using this website or submitting any form, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Information you provide directly

When you submit an application through our website, we collect the information you enter into the form. This may include:

• Your full name and contact email address
• Your phone number (optional)
• Your brand or company name, and website URL
• Your industry category
• Approximate monthly revenue and current ad spend ranges
• Your current paid media situation and biggest challenge
• Your primary goals and preferred timeline
• Services you are interested in
• How you heard about us
• Any additional information you choose to share

If you contact us directly by email, we will also collect the information contained in or attached to that correspondence.

2.2 Information collected automatically

When you visit this website, our hosting provider (Netlify) automatically collects certain technical information as part of standard server log activity. This may include your IP address, browser type and version, operating system, the pages you visit, the date and time of your visit, and referring URLs.

This information is used for the purpose of maintaining the security and performance of the website. We do not use it to identify you personally.

2.3 Cookies and tracking

This website does not use advertising cookies, analytics tracking pixels, or third-party behavioural tracking technologies. We do not place any tracking cookies on your device. Our fonts are self-hosted and do not generate requests to third-party servers.

Your browser may store a cookie to remember your light/dark mode preference (a theme preference set on your device). No personal information is stored in this cookie and it is not shared with any third party.

3. How We Use Your Information

We use the personal information we collect to:

• Respond to your enquiries and evaluate your application to work with us
• Contact you about the outcome of your application and potential next steps
• Provide, manage, and improve the services we offer to clients under a service agreement
• Communicate with you about your account, our services, or changes to our policies
• Maintain the security and functionality of this website
• Comply with our legal and regulatory obligations

We will not use your personal information for unsolicited marketing without your explicit consent.

4. Legal Basis for Processing

Under POPIA, we must have a lawful ground (referred to as a “condition for lawful processing”) to process your personal information. We rely on the following grounds:

• Consent: By submitting the application form, you consent to us processing your information for the purposes described in this policy.
• Contractual necessity: Where we have entered into a service agreement with you, we process personal information as necessary to perform that contract.
• Legitimate interests: We may process certain technical information (such as server logs) based on our legitimate interest in maintaining the security and performance of this website, where this does not override your rights and interests.
• Legal obligation: We may process or retain information where required to comply with applicable South African law.

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to any third party. We share information only in the following limited circumstances:

5.1 Service providers (operators)

We use a small number of trusted third-party service providers to operate this website and deliver our services. These providers process personal information on our behalf, only for the purposes we direct, and are bound by obligations to protect it:

• Resend (Resend Inc.): We use Resend to deliver email notifications when you submit an application form. Your form data is transmitted to Resend’s servers for the purpose of sending that email to us.
• Netlify (Netlify Inc.): This website is hosted on Netlify’s infrastructure. Netlify processes standard server log data, including IP addresses, as part of hosting and serving this website.

5.2 Legal requirements

We may disclose your personal information if required to do so by law, court order, or lawful request from a government authority, or where we believe disclosure is necessary to protect the rights, property, or safety of Burgundy Blue Media, our clients, or others.

6. Data Retention

We retain personal information only for as long as is necessary for the purposes for which it was collected, or as required by law.

• Application form submissions: Your application data is delivered to us by email and retained in our email system. It is not stored in any separate database. We retain these records for as long as is reasonably necessary for business and administrative purposes.
• Client service records: Personal information processed in the course of a client engagement is retained in accordance with our obligations under the relevant service agreement and applicable South African law.
• Server logs: Server log data collected by Netlify is retained in accordance with Netlify’s standard data retention policies.

7. Your Rights Under POPIA

As a data subject under POPIA, you have the following rights in relation to the personal information we hold about you:

• Right of access: You may request a copy of the personal information we hold about you.
• Right to correction: You may request that we correct or update inaccurate or incomplete personal information.
• Right to deletion: You may request that we delete your personal information where we no longer have a lawful basis to retain it.
• Right to object: You may object to the processing of your personal information on grounds relating to your particular situation, where that processing is based on our legitimate interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the Information Regulator of South Africa if you believe we have processed your personal information in a manner that is not compliant with POPIA. The Information Regulator can be contacted at www.justice.gov.za/inforeg.

To exercise any of these rights, please contact us using the details in Section 13 below.

8. Data Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• HTTPS encryption for all data transmitted between your browser and this website
• Form submissions are processed server-side and delivered directly to our internal email — no form data is stored in a database
• Access to business email and internal systems is restricted to authorised personnel only

While we take these precautions, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your information.

9. Children’s Privacy

This website is not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected personal information from a child, please contact us immediately and we will take steps to delete it.

10. International Data Transfers

Some of our service providers — including Resend and Netlify — are based in the United States and may process or store your personal information on servers located outside the Republic of South Africa.

Where personal information is transferred outside South Africa, we ensure that appropriate safeguards are in place in accordance with POPIA, including engaging service providers who maintain adequate data protection standards.

11. Third-Party Links

This website may contain links to third-party websites. This Privacy Policy does not apply to those websites, and we are not responsible for their content or privacy practices. We encourage you to read the privacy policy of any third-party website you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will update the “last updated” date at the top of this page. We encourage you to review this policy periodically. Your continued use of this website after any changes are posted constitutes acceptance of the revised policy.

13. Contact and Information Officer

If you have any questions about this Privacy Policy, wish to exercise any of your rights under POPIA, or have a concern about how we handle your personal information, please contact our Information Officer:

We will endeavour to respond to all requests within a reasonable time and no later than the timeframes prescribed by POPIA.