Legal starter

Privacy Notice

Who is responsible for your information

Digital Mastery, operated by [LEGAL NAME / ENTITY], is responsible for the personal information collected through this website and related communication. Contact [APPROVED EMAIL] for privacy questions or requests.

What we collect

We may collect the information you provide through enquiry forms, checkout or booking processes, and direct communication. This may include your name, business name, contact details, website links, project information, budget range, timing and transaction or booking information. The final notice must also identify any analytics or cookie data that the live website actually collects.

Why we use it

Information submitted through the quote, contact, website, service-fit, service-enquiry and HBSOS diagnosis forms is used to understand and reply to your enquiry, recommend a suitable next step and prepare a scope or proposal where relevant. Topic preferences and an email address submitted through an insights form are used only for the subscription permission described beside that form. Optional marketing permission is kept separate from permission to answer an enquiry. You may withdraw marketing permission using the approved contact route once configured.

Victor AI assistant

If you choose to use Victor, Digital Mastery may process the messages you send, the Digital Mastery page or section you are viewing, a public website address you submit for review and any contact details you voluntarily provide for a handoff. Victor first uses governed local rules and session context where that is sufficient. When live AI reasoning is needed, relevant conversation and business context may be sent to the configured AI service. When you explicitly ask for current external information, Victor may also use governed public web research and may show the public sources used. This information is used to answer your questions, select relevant Digital Mastery examples, perform the limited public-homepage review described in the interface and prepare a handoff when you ask to continue with Ruaan.

Victor uses an external artificial-intelligence service to generate responses. The final privacy notice must identify the approved AI service provider, the information sent to that provider, applicable contractual safeguards, retention settings and any cross-border processing that applies to the production configuration. Do not submit passwords, confidential client information, private financial information or other information you do not want processed through the assistant.

Victor may also keep limited server-side session and event information, including commercially relevant facts you voluntarily provide, website-review scope and interaction events, so the conversation can continue without asking you to repeat yourself, enforce usage limits and prepare a requested handoff. Behavioural information is intended to improve relevance rather than create hidden pressure. Before publication, Digital Mastery must approve the exact retention period, deletion process and access controls for these records.

Form attribution and measurement

The enquiry forms may record the page on which the form was used and campaign parameters such as source, medium and campaign. These fields must not contain names, email addresses, free-text messages or other personal form content. Form interaction events are limited to the form type, source page and event name.

Payments and financial records

The payment system is designed so Digital Mastery does not receive or store raw card numbers. The final notice must identify the approved payment provider and describe the payment-related information Digital Mastery does retain, such as the invoice/reference, client and billing details, payer contact details, amount, payment status, gateway transaction identifiers, settlement/reconciliation information, acceptance records and limited security metadata. It must also describe any cross-border processing or operator arrangements that apply to the live payment provider.

Storage, retention and service providers

Before launch, this section must state where information is stored, how long each category is retained, when it is removed and which hosting, email, payment, analytics, CRM or other service providers may process it. Financial, tax, contract and dispute-evidence records should have explicit retention categories rather than one indefinite retention period for all data.

Security and incident response

The final notice must explain the reasonable technical and organisational safeguards used for payment and client information, including access controls, protected credentials, audit records and backups. Digital Mastery should maintain a documented process for investigating and responding to a suspected security compromise, including the notification steps required by applicable law.

Your rights

Subject to applicable law, you may ask what personal information is held about you, request correction or deletion where appropriate, object to certain processing or withdraw consent where consent is the basis. The approved contact and verification process must be included here.

Concerns and complaints

Contact [APPROVED PRIVACY CONTACT] first so the concern can be investigated. The final notice should also explain how a person can contact South Africa’s Information Regulator where applicable.