BANTU DIGITAL MEDIA
Data governance · POPIA

Data Policy

Last updated: 17 August 2026

1. Purpose

This Data Policy explains the principles Bantu Digital Media applies when handling digital information in our website and business operations. It covers personal information, website and enquiry data, client-supplied data, campaign and reporting data, and information handled through technology platforms used to deliver our services.

2. Our principles

3. Website and enquiry data

Our website may process information submitted through the project enquiry form, including name, email address, company or brand name, selected service and project brief. The current form prepares an email to Bantu Digital Media rather than storing submissions in a public website database. Hosting infrastructure may create technical logs required to operate and secure the site.

4. Client and campaign data

During client engagements we may receive business information, campaign materials, audience information, performance data or other project-related data. We use this information for authorised project, reporting, operational, contractual or compliance purposes. Digital media and analytics work may involve campaign data such as impressions, clicks, conversions, reach, frequency, spend and cost metrics. Where appropriate, reporting should use aggregated or de-identified information rather than unnecessary personally identifiable data.

5. Sharing and third parties

Data may be shared with authorised technology platforms, hosting providers, professional advisers, suppliers or project partners where necessary to provide a service or operate the business. We do not sell personal information. Appropriate confidentiality, access and security considerations should be addressed before material personal or confidential data is shared.

6. Security and incidents

Depending on the system and risk, safeguards may include access controls, strong passwords, multi-factor authentication where available, secure transfer methods, restricted sharing, backups, system updates and appropriate vendor controls. Suspected data loss, unauthorised access, disclosure, alteration or destruction should be escalated promptly for investigation, containment and any legally required notification.

7. Retention and deletion

Data should not be kept indefinitely without a business, contractual or legal reason. When information is no longer required, it should be securely deleted, destroyed or de-identified where reasonably practicable.

8. Marketing, cookies and tracking

Personal information used for electronic direct marketing must be handled in accordance with applicable law. The current website does not intentionally deploy third-party behavioural advertising trackers. If Bantu introduces non-essential analytics, remarketing, personalisation or advertising technologies, we will review the data flows and update our notices and controls where required.

9. Data-subject requests

Requests concerning access, correction, deletion, objection or withdrawal of consent can be sent to info@bantudigitalmedia.co.za and will be handled subject to applicable legal requirements.

10. Governance

This Data Policy may be reviewed as Bantu Digital Media’s systems, services, vendors, analytics practices and legal obligations evolve.