Privacy Policy
Last updated: 31 October 2026
We collect as little personal information as we need, tell you plainly what we do with it, and let you control it, wherever in the world you are.
This document is a plain-language draft prepared for DE Innovative Solutions. It is not legal advice and should be reviewed by a qualified attorney before reliance.
Who we are
DE Innovative Solutions (“DEIS”, “we”) is the responsible party (POPIA) and controller (GDPR/UK GDPR) for personal information collected through deinnovativesolutions.com and the related .co.za site.
- Based in Western Cape, South Africa
- Email: info@deinnovativesolutions.com · Phone: +27 74 768 5793
- Information Officer · info@deinnovativesolutions.com
What we collect
- Details you give us: name, email, phone/WhatsApp, business name, website address and the content of your message, via the contact, call-booking, quote, estimate, Site Sprint, website audit and data-request forms.
- Technical data: IP address (kept on form submissions for spam and abuse prevention), browser, device and pages viewed.
- Analytics data (only if you accept): pseudonymous visit data from Google Analytics 4, and the campaign or referrer that brought you here.
- Payment data: card and bank details go to the payment processor, not to us. We receive confirmation, name, email and the amount.
Why we use it and our legal basis
| Purpose | Basis (POPIA s11 / GDPR Art. 6) |
|---|---|
| Reply to enquiries, quotes and booking requests | Steps at your request before a contract; legitimate interests |
| Deliver paid services, invoicing, payments | Performance of a contract; legal obligation (tax records) |
| Run the website audit and email you the report | Your request; the report is sent once |
| Analytics and improving the site | Your consent (withdraw any time via Cookie settings) |
| Security, spam and abuse prevention | Legitimate interests |
| Marketing emails | Your explicit opt-in only |
We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not make decisions about you by automated means that have legal effect.
International transfers
We are in South Africa; some providers above process data in the USA or elsewhere. Where personal information leaves your country we rely on adequate-protection laws, binding agreements, standard contractual clauses (EU/UK) or your consent, as applicable (POPIA s72, GDPR Chapter V).
How long we keep it
- Enquiries and quote requests that do not become clients: 24 months, then deleted.
- Client and invoicing records: 7 years (tax and accounting law).
- Analytics data: 14 months in Google Analytics.
- Consent record: until it expires (6 months) or you change it.
Security
HTTPS, access controls, rate limiting and spam protection on our forms, and minimal retention. No system is perfectly secure; if a breach is likely to harm you we will notify you and the relevant regulator as the law requires.
Your rights
Depending on where you live, you may ask us to:
- confirm what we hold and give you a copy (access / portability)
- correct or delete it
- restrict or object to our use of it, including direct marketing
- withdraw consent at any time (Cookie settings in the footer) without affecting earlier lawful use
- not be discriminated against for exercising privacy rights
Use the data request form or email info@deinnovativesolutions.com. We reply within 30 days (GDPR: one month; POPIA: a reasonable time; CCPA: 45 days) and may need to verify your identity first.
Region-specific notices
South Africa (POPIA). We process information lawfully, for a specific purpose, and only what is needed. You may object to processing and may lodge a complaint with the Information Regulator.
EU / UK (GDPR, UK GDPR). Legal bases are in section 3. You may complain to your local supervisory authority (in the UK, the ICO).
California and other US states (CCPA/CPRA and similar). In the last 12 months we collected identifiers, contact details, internet activity and (if you used chat) message content, for the business purposes above. We do not sell or share personal information, and we honour Global Privacy Control signals. You may request access, deletion, correction and to know the categories above, without discrimination.
Canada (PIPEDA). We obtain meaningful consent, limit collection and keep accountability with the Information Officer above. You may complain to the Office of the Privacy Commissioner of Canada.
Brazil (LGPD). Our bases are consent, contract and legitimate interests. Our contact for data-subject requests is above; you may complain to the ANPD.
Elsewhere. We apply the same standard to everyone and will follow local law where it gives you more.
Marketing
We only send marketing if you explicitly opt in (an unticked box on our forms). Every message has an unsubscribe link. Replying to your enquiry or sending a requested audit report is not marketing.
Children
Our services are for businesses and adults. We do not knowingly collect information from under-18s; tell us and we will delete it.
Complaints and regulators
Please contact us first so we can fix it. You may also complain to:
- South Africa: Information Regulator, inforegulator.org.za, complaints.IR@inforegulator.org.za
- EU/EEA: your national data protection authority. UK: the Information Commissioner’s Office (ico.org.uk)
- Canada: Office of the Privacy Commissioner. Brazil: ANPD. US: your state attorney general.
Changes to this policy
We will update the date above when this changes, and ask for your consent again if the change affects analytics.
Related: Privacy · Cookies · Terms · Data requests