How promptpunks™ collects, uses, and protects your personal information — and the rights you have over it.
Last updated · June 2026
promptpunks™ (“we”, “us”, “our”) operates this website and provides creative studio and interaction-design services. We are the Responsible Party (under South African law) and data controller (under comparable frameworks) for the personal information described in this policy. You can reach us at team@promptpunks.com.
We collect only what we need:
We use personal information to:
We do not sell your personal information, and we do not use it for automated decision-making that produces legal effects.
Where applicable law requires a lawful basis, we rely on: your consent (for example, non-essential cookies and marketing); the performance of a contract or steps taken at your request; our legitimate interests in running and improving our business; and compliance with legal obligations. Under POPIA, our processing is justified on the grounds set out in section 11 of the Act, primarily consent, contract, and legitimate interest.
We share personal information only where necessary with trusted service providers (“operators” under POPIA) who process it on our behalf — for example, website hosting, email, and analytics providers. These parties are bound by contract to process information only on our instructions and to keep it secure. We may also disclose information where required by law.
Some providers may process data outside South Africa. Where we transfer personal information across borders, we take steps to ensure it receives a comparable level of protection, as required by section 72 of POPIA.
We keep personal information only for as long as necessary to fulfil the purposes described here, to meet legal, accounting, or reporting requirements, and to resolve disputes. When it is no longer needed, we securely delete or anonymise it.
We maintain appropriate, reasonable technical and organisational measures to safeguard personal information against loss, unauthorised access, and misuse, consistent with section 19 of POPIA. No method of transmission over the internet is fully secure, but we work to protect your information and to notify you and the Information Regulator of any compromise where the law requires.
Depending on your location, you may have the right to access, correct, or delete your personal information, to object to or restrict certain processing, to withdraw consent, and to data portability. To exercise any of these, email team@promptpunks.com. We will respond within the timeframes required by applicable law.
This section sets out your specific rights under South Africa's Protection of Personal Information Act 4 of 2013 (“POPIA”) and how we comply with it.
We process personal information in line with the eight conditions for lawful processing under POPIA: accountability, processing limitation, purpose specification, further processing limitation, information quality, openness, security safeguards, and data subject participation.
Under sections 23–25 of POPIA you have the right to:
Our designated Information Officer is Gareth, who is responsible for ensuring our compliance with POPIA. You can contact the Information Officer, or raise any POPIA-related request or complaint, at team@promptpunks.com.
If you believe we have not handled your personal information lawfully, you may lodge a complaint with the Information Regulator of South Africa:
We use cookies and similar technologies as described in our Cookie Policy, including how to manage or withdraw your consent.
For any privacy question or to exercise your rights, contact us at team@promptpunks.com or through our contact page. We may update this policy from time to time; the “last updated” date above reflects the latest version.