Privacy Policy

We only collect information that is relevant to the services we provide and the operation of this website. Depending on how you interact with us, this may include:

• Identity and contact details you provide directly, such as your name, company, email address, and telephone number.
• Project information you share with us, including briefs, reference material, product details, and correspondence.
• Technical information collected automatically, such as your IP address, browser type, device information, and pages viewed.
• Usage information gathered through cookies and analytics tools, as described in our Cookie Policy.

We do not intentionally collect special categories of personal information, and we ask that you do not send us sensitive information unless it is strictly necessary for a project.

We process personal information for clearly defined, lawful purposes, including:

• Responding to enquiries and preparing quotations or proposals.
• Delivering, managing, and improving the commercial content services you engage us for.
• Communicating with you about projects, scheduling, and deliverables.
• Administering our business, including invoicing, record-keeping, and accounting.
• Improving our website, understanding how it is used, and maintaining its security.

Under POPIA and GDPR, we rely on one or more lawful bases for this processing: your consent, the performance of a contract with you, compliance with a legal obligation, or our legitimate interest in operating and promoting our studio in a measured, non-intrusive way.

Our website uses cookies and similar technologies to function correctly and to help us understand how visitors use the site. Cookies are small text files stored on your device that allow certain features to work and provide anonymised usage insights.

You can control or disable cookies at any time through your browser settings. For a full breakdown of the cookies we use and how to manage them, please see our Cookie Policy.

We use privacy-conscious analytics to measure website performance and understand which content is useful to visitors. This information is aggregated and does not identify you personally.

Where analytics providers process data outside South Africa or the European Economic Area, we take reasonable steps to ensure that appropriate safeguards are in place for any cross-border transfer of personal information.

When you contact us through a form, by email, or by telephone, we use the details you provide to respond to your enquiry and to progress any potential or active engagement.

We do not use these details for unrelated marketing without your consent, and we do not sell or rent your personal information to third parties under any circumstances.

We keep personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

Project files and correspondence are typically retained for the duration of our engagement and for a reasonable period afterwards, after which they are securely deleted or anonymised.

Subject to applicable law, you have the right to:

• Request access to the personal information we hold about you.
• Request that inaccurate or incomplete information be corrected.
• Request that your personal information be deleted, where there is no lawful reason for us to retain it.
• Object to or request that we restrict certain processing of your information.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with a supervisory authority.

In South Africa, the relevant supervisory authority is the Information Regulator. If you are in the EU or UK, you may contact your local data protection authority. We will always try to resolve any concern with you directly first.

If you have any questions about this Privacy Policy, or wish to exercise any of your rights, please contact us at hello@subnetstudio.com. We will respond within a reasonable timeframe and in line with our obligations under POPIA and GDPR.