Privacy Policy — EJT Digital

01 — Who we are

EJT Digital is operated by Edward J. Tsumele, based in Johannesburg, South Africa. We are the responsible party under POPIA for any personal information you submit via this website or through direct communication (email, WhatsApp, social media).

02 — What we collect

When you complete the intake form on this website, we collect:

Your name
Your email address
Your WhatsApp number
Your business name, industry and location
Monthly revenue band (a range, not exact figures)
Free-text answers about your current marketing, brand perception and package interest
Your consent to be contacted

We do not collect payment card details on this site. If you become a client, invoices are settled outside the site (EFT or a linked payment provider). We do not use cookies for tracking, advertising, or analytics on this site.

03 — Why we collect it

Your information is used only for:

Responding to your intake with a strategy and visual direction within 72 hours
Contacting you about the package you enquired about
Sending invoices and delivering the services you engage us for
Notifying you about the next cohort (only if you ticked the “not ready this month” checkbox)

We do not use your information for marketing to third parties. We do not sell, rent, or trade your information under any circumstance.

04 — How it’s stored + who sees it

Intake submissions are sent via EmailJS (a form-delivery service based in the USA) and arrive in a Gmail inbox managed by Edward directly. From there they may be copied to a private client management system.

Only Edward J. Tsumele has access to your intake data. We use no account managers, no juniors, no offshored teams.

The service providers we rely on (Gmail, EmailJS, WhatsApp, Netlify) each have their own privacy and security terms which we’ve reviewed before using them.

05 — How long we keep it

Intake data from prospects who don’t become clients is retained for up to 12 months, then deleted. Client data is retained for the duration of our engagement plus 5 years, to meet South African tax record-keeping requirements (SARS). After that period we delete or anonymise it.

06 — Your rights under POPIA

You have the right to:

Request confirmation of whether we hold your personal information
Request a copy of the personal information we hold about you
Request correction or deletion of your personal information
Object to further processing of your personal information
Withdraw consent at any time (this will not affect processing already carried out lawfully)
Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email [email protected] with the subject line “POPIA request”. We’ll respond within 30 days.

07 — Security

This website is served over HTTPS with modern security headers (HSTS, CSP, X-Frame-Options, etc.). Form submissions travel encrypted. Access to the Gmail inbox holding intake data is protected by a strong password and two-factor authentication. We do not store your data in unsecured spreadsheets, public folders, or shared drives.

08 — Complaints

If you believe we’ve mishandled your data, please email us first at [email protected] so we can resolve it directly.

If you’re still unsatisfied you can lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za.

09 — Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of the page will always reflect the latest version. Material changes will be flagged to active clients via WhatsApp.

Questions about this policy: [email protected] · 067 007 0229.

Your data. Handled with the same standard as the work.