ideaistudio
Legal

Privacy Policy

Effective 30 May 2026 · IDEAI (Pty) Ltd

This Privacy Policy explains how IDEAI (Pty) Ltd ("IDEAI", "we", "us" or "our") collects, uses, shares and protects your personal information when you visit ideai.co.za, contact us, or use our services. We are committed to processing personal information lawfully and transparently in line with South Africa's Protection of Personal Information Act, 2013 (POPIA).

1. Who we are

IDEAI (Pty) Ltd is a software studio registered in South Africa (registration number 2026/390992/07), with its registered address at 28 Omega Road, Rozendal, Stellenbosch, Western Cape, 7600.

For any privacy matter, our Information Officer can be reached at hello@ideai.co.za.

2. The information we collect

We collect only what we need to run our business and serve you:

  • Information you give us — your name, email address, phone or WhatsApp number, company details, and the contents of any message or brief you send us when you make an enquiry or engage us.
  • Billing information — the details required to invoice and take payment. Card payments are handled entirely by our payment processor (see section 5); we do not collect or store your full card number.
  • Information collected automatically — basic technical and usage data such as your browser type, device, approximate region, and pages viewed, gathered through standard server logs and through Google Analytics (see section 4) to keep the site secure and reliable and to understand how it is used.
  • Local browser storage — we store your theme (light/dark) and language preference in your browser's local storage so the site remembers them. These never leave your device and are not used for tracking or advertising.

3. How and why we use your information

We process your personal information to:

  • respond to your enquiries and provide quotes or proposals;
  • deliver, operate and support the products and services you engage us for;
  • invoice you and process payments;
  • keep the website and our services secure, available and working correctly;
  • comply with our legal, accounting and regulatory obligations.

Our lawful bases under POPIA are your consent, the performance of a contract with you, our legitimate business interests, and compliance with the law.

4. Cookies and similar technologies

We do not use advertising cookies or sell your data to advertisers. Alongside the theme and language preferences we store in your browser, and any essential cookies set by our hosting or security providers, we use Google Analytics to understand how visitors use the site.

Google Analytics sets cookies and collects aggregated usage data — such as the pages you view, your approximate region, and your browser and device type — so we can see which content is useful and improve the site. We have configured it for analytics only; we do not use it for advertising. We rely on our legitimate interest in measuring and improving our website as the lawful basis for this processing. Google processes this data on our behalf and its handling is governed by its own privacy policy at policies.google.com/privacy. You can opt out across all sites using Google's browser add-on at tools.google.com/dlpage/gaoptout, or by blocking cookies in your browser.

5. Payments and PayStack

All payments are processed by PayStack, a PCI-DSS compliant payment provider. When you pay, your card details are entered and handled directly by PayStack on their secure systems — IDEAI never sees or stores your full card number, CVV or PIN. We receive only the information needed to confirm and reconcile your payment (such as a transaction reference and the outcome). PayStack's handling of your data is governed by their own privacy policy at paystack.com/privacy.

6. Who we share your information with

We do not sell your personal information. We share it only with trusted service providers who help us operate, and only as far as needed:

  • Payment processing — PayStack, to take and reconcile payments;
  • Hosting and infrastructure — our cloud hosting provider, to run the site and services;
  • Analytics — Google Analytics, to measure and understand how the site is used;
  • Email and communications — our email delivery provider, to correspond with you;
  • Professional and legal advisors — where required for accounting, audit or legal compliance.

These providers are bound to protect your information and may only use it to provide their service to us. We may also disclose information where required by law.

7. International transfers

We work remotely with collaborators and service providers in South Africa and abroad (including Sweden), and some of our providers process data outside South Africa. Where personal information is transferred across borders, we take reasonable steps to ensure it remains protected to a standard consistent with POPIA.

8. How long we keep it

We keep personal information only for as long as necessary for the purposes set out above, or as required by law (for example, tax and accounting records must be kept for a number of years). When information is no longer needed, we securely delete or anonymise it.

9. How we protect your information

We apply reasonable technical and organisational measures — including encryption in transit, access controls and trusted, security-conscious providers — to guard against loss, misuse and unauthorised access. No method of transmission or storage is ever completely secure, but we work to protect your information and to address any incident promptly.

10. Your rights

Under POPIA, you have the right to:

  • ask what personal information we hold about you and request access to it;
  • ask us to correct or update information that is inaccurate or incomplete;
  • ask us to delete or destroy information we no longer have grounds to keep;
  • object to certain processing, and withdraw any consent you have given;
  • lodge a complaint with the Information Regulator.

To exercise any of these rights, email hello@ideai.co.za. You may also contact the Information Regulator (South Africa) at inforegulator.org.za.

11. Children

Our website and services are not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with a revised effective date. Significant changes will be highlighted where appropriate.

13. Contact us

Questions about this policy or how we handle your information? Email us at hello@ideai.co.za.