Privacy Policy

Last updated: 21 October 2026

This policy explains what personal information Druff Interactive collects through this website and in the course of working with clients, why we collect it, how we look after it, and the rights you have under the Protection of Personal Information Act, 2013 (POPIA).

1. Who we are

The responsible party is Druff Interactive cc, trading as Druff Agency (registration number 2002/004090/23), of 47 Cedarwood Crescent, Woodlands Lifestyle Estate, Moreletapark, Pretoria, 0181, South Africa. Our Information Officer is Daniel Newman, who can be reached at hello@druff.agency or on +1 (302) 608-6026. Our PAIA manual (PDF) sets out how to request access to records under the Promotion of Access to Information Act, 2000.

2. What we collect

Information you give us. When you fill in a form on this website (such as a quote request, a booking, the client details form, the hosting order form, the debit order mandate or the feedback form), we collect what you enter. Depending on the form, this can include your name, email address, phone number, company name, physical and postal address, company registration and VAT numbers, details of your project, and, for a debit order, your bank account details and signature.

Information sent with a form. With each form submission we record the date and time, the page it was sent from and your IP address, so that we can deal with spam and abuse.

What is required. Fields marked as required on a form (usually your name, email address and phone number) are needed for us to respond; the rest are optional. We do not use automated decision-making or profiling.

Booking a call. Calls are booked through Google Calendar. When you pick a time, Google collects your name and email address to confirm the booking and send the Google Meet link, under Google’s privacy policy.

Information collected automatically. Like most websites, we use Google Analytics, Google Tag Manager and Google Ads to understand how the site is used and how our advertising performs. These services use cookies and similar technologies to collect information such as the pages you visit, how long you stay, the type of device and browser you use, your approximate location (from your IP address) and how you arrived at the site.

Client work. While working for clients we may receive personal information contained in the material they send us, such as names and photographs in a company profile. We use it only to produce the work requested.

3. Why we use it

• To reply to your inquiry, prepare a quote or arrange a call.
• To set up and manage your account, deliver the work, and invoice and collect payment.
• To provide hosting, domain and maintenance services you have ordered.
• To improve the website and measure how well our advertising works.
• To keep the website secure and prevent spam and fraud.
• To meet our legal, tax and accounting obligations.

We process your information because you have asked us to (for example by sending a form), because it is needed to carry out a contract with you, because the law requires it, or because we have a legitimate interest in running and improving our business. We do not sell your personal information, and we do not add you to a mailing list because you sent a form.

4. Who we share it with

We share personal information only with service providers who help us run our business, and only as far as they need it:

• our website hosting provider, on whose servers the website and form submissions are stored;
• Google, for email (Google Workspace), call bookings (Google Calendar and Meet), and website analytics and advertising (Google Analytics, Tag Manager and Ads);
• our bank, to process payments and debit orders;
• our accountants and auditors, and authorities where the law requires it.

These providers are required to keep your information secure and to use it only for the services they provide to us.

5. Information sent outside South Africa

Some of our service providers, including Google, may store or process information outside South Africa. Where this happens, we rely on providers that are bound by data protection laws or contractual terms that give a level of protection comparable to POPIA.

We also work for clients outside South Africa. Where a client’s own data protection law (such as the GDPR or UK GDPR) requires it, we will sign a data processing agreement covering the personal information in the material they send us.

6. How we protect it

Our website is served over an encrypted connection (HTTPS). Form submissions are stored in a database kept outside the public website folder, protected by password-controlled access, and backed up daily. Access to client information is limited to the people who need it to do their work. No system is completely secure, but we take reasonable technical and organisational measures to prevent loss, misuse and unauthorised access, and we will tell you and the Information Regulator if your information is compromised, as POPIA requires.

7. How long we keep it

We keep inquiries for as long as needed to respond and follow up, and client records for as long as you are a client and afterwards for as long as the law requires, which is five years for tax records and up to fifteen years for a close corporation’s accounting records. Daily website backups are kept for 30 days. When information is no longer needed, we delete it or make it anonymous.

8. Cookies

The website itself does not need cookies to work. The cookies on this site are set by Google Analytics, Tag Manager and Ads, as described in section 2. You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with Google’s opt-out browser add-on and manage ad personalisation in Google’s ad settings. Blocking these cookies does not affect how the site works.

9. Your rights

Under POPIA you have the right to:

• ask whether we hold personal information about you, and for a copy of it;
• ask us to correct information that is wrong, out of date or incomplete;
• ask us to delete information we no longer have a lawful reason to keep;
• object to us processing your information, including for direct marketing;
• withdraw consent you have given, without affecting anything done before;
• complain to the Information Regulator.

To make a request, email hello@druff.agency. We may ask you to confirm your identity before acting on it, and we will respond within a reasonable time. If you are unhappy with how we have handled your information, you can contact the Information Regulator of South Africa at inforegulator.org.za or complaints.IR@justice.gov.za.

10. Children

This website and our services are intended for businesses. We do not knowingly collect personal information from anyone under 18.

11. Links to other websites

This website links to other sites, such as our portfolio clients and social media pages. We are not responsible for how those sites handle your information, so please read their privacy policies.

12. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.

13. Contact

Druff Interactive cc, trading as Druff Agency · Registration 2002/004090/23 · 47 Cedarwood Crescent, Woodlands Lifestyle Estate, Moreletapark, Pretoria, 0181, South Africa · hello@druff.agency · +1 (302) 608-6026