LEGAL

Privacy Policy

Last updated 26 August 2026. This policy explains what personal information this website collects, why we collect it, and what we do not do with it.

1. Who we are

This website is operated by Single Source Studios (Pty) Ltd (“Single Source,” “we,” “us”), a private company incorporated in South Africa and based in Durban, KwaZulu-Natal. Under the Protection of Personal Information Act 4 of 2013 (“POPIA”) we are the responsible party for the personal information described below. Under the UK and EU General Data Protection Regulation (“GDPR”), where it applies, we act as the controller.

2. What this policy covers

This policy covers personal information collected through the website at singlesource.co.za and its subpaths.

It does not cover personal information we process inside a client engagement. Where a client instructs us to process personal information as part of a project, we act as an operator under POPIA and as a processor under the GDPR, and that processing is governed by the signed statement of work or master services agreement rather than by this policy.

3. What we collect

We collect personal information in exactly three ways.

  1. The contact form. When you submit it we receive your name, your email address, your message, and a budget range if you choose to select one. The budget field is optional and the form works without it.
  2. The Reasoning Audit booking form. When you submit it we receive your name, your email address, your company name and your message.
  3. Web server logs. Our hosting provider records standard web server request logs, which include the requesting IP address, the time of the request, the URL requested, and the browser user-agent string. These are generated by the web server itself and are used for security and fault diagnosis.

Both forms deliver their contents to us by email. Neither writes to a database, and this website has no user accounts, no login and no stored profiles.

4. What we do not collect

This is a static website and it is deliberately quiet. As at the date above, it does not:

  • set any cookies, whether first-party or third-party;
  • run any analytics package, including Google Analytics, Google Tag Manager, Plausible, Fathom, PostHog, Hotjar or any equivalent;
  • run any advertising pixel, remarketing tag or conversion tracker;
  • fingerprint your device or browser;
  • build a profile of you, or make automated decisions about you;
  • collect special personal information as defined in section 26 of POPIA.

Because we set no cookies, there is no cookie banner on this site. If that changes, this policy will be updated before the change goes live, and consent will be requested where the law requires it.

5. Why we process it, and on what basis

Form submissions are processed for one purpose: to read your enquiry and reply to it. We do not use enquiry data for marketing, we do not add you to a mailing list, and we do not use it to train any model.

Under POPIA, our justification is that the processing is necessary to conclude or perform under a contract to which you are a party, or is carried out with your consent, which you give by choosing to submit the form. Under the GDPR, where it applies, our lawful bases are steps taken at your request prior to entering into a contract (Article 6(1)(b)) and our legitimate interest in responding to business enquiries addressed to us (Article 6(1)(f)). Server logs are processed on the basis of our legitimate interest in operating the site securely.

6. Who else sees it

Two categories of supplier necessarily handle this information in order for the site and its forms to function:

  • Our hosting provider, which serves the website and generates the server logs described above. Hosting is in South Africa.
  • Our email provider, which transmits and stores the form submissions that reach our inbox.

We do not sell personal information. We do not rent, trade or share it for anyone else’s marketing. We do not disclose it to third parties beyond the suppliers above, except where we are legally compelled to do so, or where disclosure is necessary to establish, exercise or defend a legal claim.

7. How long we keep it

Enquiries that do not lead to an engagement are retained for up to 24 months from the date of the last correspondence, so that we can pick up a conversation that resumes, and are then deleted. Enquiries that lead to an engagement are retained for the life of that engagement and afterwards for as long as any statutory record-keeping obligation requires, most commonly the five-year period under South African tax and companies legislation. Server logs are retained on the rolling schedule operated by our hosting provider.

8. Where it is stored, and cross-border transfer

Website hosting and the primary mailbox are located in South Africa. If you contact us from outside South Africa, submitting the form necessarily transfers your information to South Africa. South Africa has a general data protection law in POPIA, and section 72 of POPIA governs any onward transfer of personal information out of the Republic.

9. Your rights

You have rights over your personal information under POPIA, and additional or differently framed rights under the GDPR where it applies to you. Those rights, and the routes for exercising them and for complaining to a regulator, are set out in full on our POPIA and GDPR statement.

In summary: you can ask us what we hold about you, ask us to correct it, and ask us to delete it. Write to info@singlesource.co.za and we will respond within 30 days.

10. Security

The site is served over HTTPS. Form submissions are transmitted to our mail server over an authenticated, encrypted SMTP connection. Access to the mailbox that receives them is restricted to Single Source personnel who need it in order to reply.

No transmission over the internet is completely secure, and we do not claim otherwise. Please do not send credentials, identity-document numbers, card numbers or other sensitive information through the contact form. We will never ask you for any of those by email.

11. Children

This website offers business services and is not directed at children. We do not knowingly collect the personal information of a child as defined in POPIA. If you believe a child has submitted information to us, contact us and we will delete it.

12. Changes to this policy

We may update this policy. The date at the top of the page states when it last changed. Where a change materially affects how we handle information already collected, we will say so rather than change the page quietly.

13. Contact

Single Source Studios (Pty) Ltd, Durban, KwaZulu-Natal, South Africa. For any privacy question, including a request to access, correct or delete your information, write to info@singlesource.co.za. Our Information Officer for POPIA purposes is Rainier Potgieter, reachable at the same address.