Privacy Policy

1. Introduction

Welcome to BlueBloom Digital ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website or services.

This policy has been prepared in compliance with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa, and applies to all personal information we process as a responsible party.

2. Information Officer

In terms of POPIA, BlueBloom Digital has designated an Information Officer who is responsible for ensuring compliance with this policy and applicable data protection laws.

Our Information Officer is registered with the Information Regulator of South Africa as required by POPIA.

3. Information We Collect

We collect personal information that you voluntarily provide to us when you interact with our website or services. This may include:

• Full name
• Email address
• Phone number
• Any other information you choose to share with us

We only collect personal information that is adequate, relevant, and not excessive in relation to the purpose for which it is collected, in line with POPIA Section 10.

4. How We Use Your Information

We process your personal information for the following purposes:

• To respond to your enquiries and provide our services
• To fulfil contractual obligations between us
• To send you relevant communications about our products and services (with your consent)
• To improve our website and user experience
• To comply with our legal obligations under South African law

We will not process your personal information for any purpose incompatible with the purpose for which it was originally collected, without your consent.

5. Third-Party Service Providers

We may share your personal information with trusted third-party service providers who assist us in operating our business. These include:

• Cloud hosting and infrastructure providers
• Email and communication platforms
• Website analytics tools
• Customer relationship management (CRM) systems

All third-party processors are required to handle your personal information in accordance with POPIA and are bound by appropriate data processing agreements. We will never sell your personal information to any third party.

6. Cross-Border Transfers of Personal Information

Some of our third-party service providers may be based outside of South Africa, which means your personal information may be transferred to and stored in countries outside of South Africa.

In accordance with POPIA Section 72, we will only transfer your personal information to a foreign country if:

• The recipient country has adequate data protection laws in place; or
• You have consented to the transfer; or
• The transfer is necessary for the performance of a contract with you; or
• We have implemented appropriate safeguards, such as contractual protections, to ensure your information remains protected.

7. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance your browsing experience and analyse how our site is used. Cookies are small text files stored on your device.

We may use the following types of cookies:

• Essential cookies: required for the website to function correctly
• Analytics cookies: help us understand how visitors use our site (e.g. Google Analytics)
• Marketing cookies: used to show you relevant content and advertisements

You can control or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website.

8. How We Protect Your Information

We take the security of your personal information seriously. We implement reasonable technical and organisational measures to protect your information against unauthorised access, loss, alteration, or disclosure. These measures include:

• Encrypted data transmission (HTTPS/SSL)
• Access controls limiting who can view your personal information
• Regular security reviews of our systems and practices

While we take all reasonable precautions, no method of transmission over the internet is completely secure. In the event of a security breach that affects your personal information, we will notify you and the Information Regulator as required by POPIA.

9. How Long We Keep Your Information

We will only retain your personal information for as long as is necessary to fulfil the purpose for which it was collected, or as required by law.

In general:

• Contact and enquiry information is retained for up to 24 months from your last interaction with us
• Information related to active contracts or services is retained for the duration of the relationship and for up to 5 years thereafter, in line with general legal requirements
• Information that is no longer required will be securely deleted or anonymised

You may request deletion of your personal information at any time (subject to legal retention obligations) by contacting our Information Officer.

10. Your Rights Under POPIA

As a South African resident, you have the following rights under the Protection of Personal Information Act (POPIA):

• Right of access: You may request a copy of the personal information we hold about you
• Right to correction: You may request that we correct or update inaccurate information
• Right to deletion: You may request that we delete your personal information, subject to legal obligations
• Right to object: You may object to the processing of your personal information in certain circumstances
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time

To exercise any of these rights, please submit a written request to our Information Officer at pierre@bluebloom.co.za. We will respond to your request within 30 days. If we are unable to comply, we will explain why.

11. Children's Personal Information

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe that a child has provided us with personal information without appropriate consent, please contact us immediately at pierre@bluebloom.co.za and we will take steps to delete such information promptly.

12. Complaints and the Information Regulator

If you are not satisfied with how we have handled your personal information or responded to your request, you have the right to lodge a complaint with the Information Regulator of South Africa:

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will update the "Last updated" date at the top of this policy and, where appropriate, notify you directly.

We encourage you to review this policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please contact our Information Officer: