Legal

Privacy Policy

Duo Technology Studio (Pty) Ltd Effective date: 1 June 2026 Version 1.0

This Privacy Policy explains how Duo Technology Studio (Pty) Ltd (“we”, “us”, “our”, or “the Company”) collects, uses, shares, and protects your personal information. We are committed to processing personal information lawfully, fairly, and transparently in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA) and any other applicable South African law.

1. Who We Are

Duo Technology Studio (Pty) Ltd is a private company registered in South Africa. We are a technology and design studio that builds websites, applications, and digital products for our clients. We act as a responsible party under POPIA in respect of the personal information described in this policy.

  • Company registration number:2025/864445/07
  • Address:10 Rokewood Road, Die Boord, Stellenbosch, Western Cape, 7613
  • Email:admin@duotechnology.co.za
  • Website:www.duotechnology.co.za

2. Information Officer

In line with sections 55 and 56 of POPIA, we have appointed an Information Officer responsible for our compliance with POPIA and for handling queries, requests, or complaints relating to personal information.

3. What Personal Information We Collect

Depending on how you interact with us, we may collect and process:

  • Identity and contact details — name, surname, job title, company name, email, and address.
  • Client and project information — details you provide so we can design and build your website, app, or digital product, including briefs, content, account details, and correspondence.
  • Billing and payment information — billing details, invoices, and transaction records (we do not store full card details).
  • Technical and usage information — when you use our website: IP address, device and browser type, pages visited, and cookie data.
  • Recruitment information — where you apply for a position: CV, qualifications, references, and related details.
  • Any other information you voluntarily provide.

4. How We Collect Personal Information

  • Directly from you — when you contact us, request a quote, enter into an agreement, use our services, or apply for a role.
  • Automatically — through cookies and similar technologies when you use our website (see section 11).
  • From third parties — such as your employer, business partners, or public sources, where relevant and lawful.

5. Why We Process Your Personal Information

We only process personal information for lawful purposes, including to:

  • Provide, manage, and improve our products and services;
  • Communicate with you and respond to enquiries;
  • Conclude and perform our contractual obligations;
  • Process payments and maintain accounting records;
  • Comply with legal, regulatory, and tax obligations;
  • Protect our legitimate interests, including system security and fraud prevention;
  • Send service updates or, where you have consented, marketing communications.

We rely on one or more lawful bases under POPIA: your consent; performance of a contract; compliance with a legal obligation; protection of a legitimate interest; or the proper performance of a public-law duty.

6. Sharing and Disclosure

We do not sell your personal information. We may share it with:

  • Operators (service providers) who process information on our behalf — such as hosting, payment, cloud storage, email, and IT-support providers. These parties are bound by written agreements to process information only on our instruction and to keep it secure.
  • Professional advisors such as our accountants, auditors, and legal advisors.
  • Regulators and authorities where required by law or in response to a valid legal request.

7. Cross-Border Transfers

Some service providers may store or process personal information outside South Africa. Where this occurs, we take reasonable steps to ensure the recipient is subject to protection substantially similar to POPIA, as required by section 72.

8. How We Protect Your Personal Information

We maintain appropriate, reasonable technical and organisational measures to safeguard personal information — including access controls, encryption in transit, secure hosting, staff confidentiality obligations, and regular review. However, no method of transmission over the internet or electronic storage is completely secure, and while we strive to protect your information, we cannot guarantee absolute security. If a security compromise occurs, we will notify the Information Regulator and affected data subjects as required by section 22.

9. Retention

We keep personal information only as long as necessary for the purposes it was collected, or as required or permitted by law (for example, tax and company-law record-keeping). When no longer needed, we securely delete, destroy, or de-identify it.

10. Your Rights as a Data Subject

Subject to POPIA, you have the right to:

  • Be notified that your information is being collected, and whether it has been accessed without authorisation;
  • Request access to the personal information we hold about you;
  • Request correction, updating, or deletion of information that is inaccurate, irrelevant, excessive, outdated, or unlawfully obtained;
  • Object, on reasonable grounds, to processing;
  • Withdraw consent where processing is based on consent (without affecting prior processing);
  • Not be subject to a decision based solely on automated processing;
  • Lodge a complaint with the Information Regulator (see section 12).

To exercise these rights, contact our Information Officer at admin@duotechnology.co.za. Access requests are handled under PAIA and our PAIA Manual.

11. Cookies and Website Analytics

Our website may use cookies and similar technologies to enable functionality, remember your preferences, and understand how the site is used. You can manage or disable cookies through your browser, though some features may not work as a result.

12. Complaints

If you have a concern about how we process your personal information, please contact our Information Officer first. In line with the POPIA Regulations, we maintain a documented internal complaint-handling process and will acknowledge and respond to complaints within 21 calendar days of receipt.

If you are not satisfied, you may lodge a complaint with the Information Regulator:

13. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on our website, and the effective date above will be updated accordingly.

14. How to Contact Us

  • Duo Technology Studio (Pty) Ltd
  • Attention: WJ du Plessis (Information Officer)
  • Email:admin@duotechnology.co.za
  • Address:10 Rokewood Road, Die Boord, Stellenbosch, Western Cape, 7613
Back to home