Privacy Policy

Privacy Policy for WebspireStudio (VSAS)

Effective Date: September 29, 2025
Last Updated: September 29, 2025

At WebspireStudio (VSAS), accessible at https://vsas.co.za/ (the “Site”), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site, use our services (including custom websites, e-commerce solutions, maintenance plans, migrations, and chatbots), or interact with us. We operate in compliance with South Africa’s Protection of Personal Information Act (POPIA) and other relevant data protection laws.

By accessing the Site or our Services, you consent to the practices outlined here. If you do not agree, please do not use the Site or Services.

1. Information We Collect

We collect data to deliver and improve our Services, personalize your experience, and fulfill legal requirements. Categories include:

a. Information You Provide
– Contact Details: Name, email, phone number, company name, or address when you submit forms, request quotes, or sign up for Services.
– Payment Information: Billing details (e.g., card numbers) processed securely via third-party providers like PayFast or Stripe for paid Services.
– Project Data: Content you share for website development, such as text, images, logos, or business requirements.

b. Automatically Collected Information
– Usage Analytics: Pages viewed, time spent, referral sources, and interaction data via tools like Google Analytics.
– Technical Data: IP address, browser type, device info, operating system, and approximate location (from IP).
– Chatbot Data: Conversations with our demo or integrated chatbots to refine functionality.

c. Information from Third Parties
– Data from social platforms (e.g., Instagram @webspirestudio) if you link accounts.
– Aggregated insights from service partners (e.g., hosting providers).

We do not collect sensitive data (e.g., health, racial, or political info) unless necessary for a Service and with your explicit consent.

2. How We Use Your Information
Your data is used solely for legitimate purposes:
– Service Delivery: To build, maintain, or migrate websites; process payments; or deploy chatbots.
– Communication: Sending updates, quotes, invoices, or support responses.
– Improvement: Analyzing trends to enhance Site performance, SEO, or Service offerings.
– Marketing: Sharing newsletters or promotions (with opt-in consent; unsubscribe anytime via email).
– Compliance: Retaining records for audits or responding to legal requests under POPIA.

3. Legal Basis for Processing
– Consent: For marketing or optional features.
– Contract: To perform agreed Services (e.g., website builds).
– Legitimate Interests: Site security, fraud prevention, or analytics (balanced against your rights).
– Legal Obligation: POPIA compliance or tax reporting.

4. Sharing Your Information
We never sell your data. Sharing occurs only when necessary:
– Service Providers: Trusted vendors (e.g., Google for analytics, AWS for hosting) bound by data protection agreements.
– Legal Needs: To authorities if required by law (e.g., subpoenas).
– Business Changes: In mergers or acquisitions, with notice where possible.
– With Your Consent: For specific third-party integrations you approve.

5. Data Security and Retention
We implement reasonable safeguards (e.g., encryption, access controls, regular audits) to protect data. However, no system is infallible—contact us at info@vsas.co.za if you suspect a breach.

Data is retained only as long as needed:
– Service-related: Duration of engagement + 7 years for records.
– Marketing: Until opt-out.
– Analytics: Anonymized indefinitely.

6. Your Rights
Under POPIA, you can:
– Access, correct, or delete your data.
– Object to processing or withdraw consent.
– Request portability (in structured format).
– Lodge complaints with the Information Regulator[](https://inforegulator.org.za/).

Email info@vsas.co.za to exercise rights; we’ll respond within 30 days.

7. International Transfers
Data may be processed outside South Africa (e.g., via Google servers in the US) under standard contractual clauses ensuring POPIA-level protection.

8. Children’s Privacy
Our Services are not for children under 16. We do not knowingly collect their data.

9. Changes to This Policy
We may update this Policy; changes will be posted here with the new effective date. Continued use constitutes acceptance.

10. Contact Us
Questions? Reach us at:
– Email: info@vsas.co.za
– Instagram: @webspirestudio

This Policy is incorporated into our Terms of Service.