Privacy notice

The short version

• We only collect what you type into our contact form.
• We use it only to reply to you and to discuss the work you asked about.
• This website uses no cookies, analytics or tracking scripts.
• You can ask us at any time to see, correct or delete what we hold about you.

Who we are

The responsible party for your personal information is Edelstein Group (Pty) Ltd (registration number 2026/883223/07), a company based in the Western Cape, South Africa. In this notice, "we", "us" and "our" mean Edelstein Group.

Our Information Officer is Jan-Harm Steenkamp. You can reach him through our contact form; please mention "Privacy" in your message.

What we collect

When you use our contact form, we collect:

Information collected through the contact form

Your name	So we know who we're talking to.
Your email address	So we can reply.
Business or organisation (optional)	To understand your context.
The topic you choose (optional)	To route your enquiry.
Your message	To understand what you need. Please don't include sensitive personal information, such as health or financial details, in this message.

Our hosting provider also keeps standard technical server logs, such as IP addresses and the pages requested, to keep the website secure and running. We don't use these logs to identify or profile visitors.

Why we use it

We use your information only to respond to your enquiry, arrange a conversation, and, if you choose to work with us, prepare a proposal. We process it with your consent, which you give by ticking the box on the form, and because it's needed to take the steps you've asked for.

We don't sell your information, rent it out or use it for unrelated marketing. We won't add you to a mailing list.

Cookies and tracking

This website does not set cookies and does not use analytics, advertising or social-media tracking scripts.

Who else handles it

We use a small number of trusted service providers (called "operators" in POPIA) to run the website and our email:

• Netlify hosts this website and receives contact-form submissions on our behalf.
• Our email provider delivers form notifications and our replies to you.

These providers may store information on servers outside South Africa, including in the United States and Europe. Where that happens, we rely on providers that are bound by data-protection terms giving a level of protection substantially similar to POPIA, as section 72 of the Act requires.

How long we keep it

If your enquiry doesn't lead to work together, we delete it within 12 months of our last contact. If you become a client, we keep correspondence for as long as needed to deliver the work and to meet our legal and tax record-keeping obligations, and no longer.

How we protect it

We take reasonable technical and organisational steps to protect your information, including encrypted connections (HTTPS) to this website, access to form submissions limited to the Information Officer, and strong account security on the services we use.

Your rights

Under POPIA you have the right to:

• ask whether we hold personal information about you, and request a copy;
• ask us to correct or update it;
• ask us to delete it;
• object to how we use it, or withdraw your consent at any time;
• lodge a complaint with the Information Regulator.

To make a request, send us a message through the contact form with "Privacy request" in the message. We may need to confirm your identity before acting on it, and we will respond within a reasonable time.

The Information Regulator

If you're not satisfied with how we've handled your information, you can contact the Information Regulator (South Africa) at inforegulator.org.za. We'd appreciate the chance to put things right first.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it last changed.