Privacy Policy

Draft for studio and legal review · 22 October 2026 This notice describes the current website's enquiry handling and the protections required by the Protection of Personal Information Act 4 of 2013 (POPIA). Contact CS Art Studio in Pretoria, South Africa, at enquiries@csartstudio.co.za with privacy questions. The studio's full legal identity, physical address and designated Information Officer details still require confirmation before this notice is treated as final.

Information and purposes

Depending on the enquiry form, you may provide your name, email, telephone number, artwork or product selection, order preferences and message. Form submissions are saved with the form name, relevant artwork and submission time for staff to respond and manage the enquiry. Website, hosting and security services may process technical connection information such as IP addresses, request details and device information to operate and secure the service. The purpose of enquiry information is to answer your request, discuss a possible order, administer agreed purchases and maintain records where lawfully necessary. Processing must have an applicable POPIA basis, such as steps requested before a contract, performance of a contract, a legal obligation, a justified legitimate interest or valid consent where required. Providing information is voluntary; fields marked required are needed to handle that form and failure to provide necessary details may prevent us from responding. Please do not send unnecessary sensitive information or another person's details without a lawful basis.

Services, sharing and overseas processing

Enquiries are stored in Lovable Cloud and made available to authorised studio staff. Website hosting, media delivery and font services also process requests needed to display the site. If you use email or WhatsApp links, your communication is handled by those services under their own privacy terms. Couriers or other providers may need relevant information to fulfil an order once agreed. Disclosures must be limited to a lawful purpose, including where legally required. Cloud and other service providers may process information outside South Africa. POPIA section 72 permits transfers only when an applicable legal condition is met, such as adequate protection through law or binding agreement, valid consent, or qualifying contractual necessity. The studio must verify actual provider locations, operator arrangements and transfer safeguards; this draft does not assert that this verification is complete.

Retention, security and marketing

POPIA requires information to be retained only for as long as justified by its purpose or required or permitted by law, and then securely deleted or de-identified where appropriate. A specific studio retention schedule still needs to be confirmed; this notice does not claim automatic deletion is configured. The website restricts enquiry management to authorised staff. The studio must maintain reasonable technical and organisational safeguards under section 19 and notify the Information Regulator and affected individuals of qualifying security compromises as required by section 22. An artwork enquiry is not consent to a newsletter. Unsolicited electronic direct marketing must meet POPIA section 69, including applicable consent or existing-customer requirements and identification and opt-out information. Marketing practices and consent records must be verified before marketing is started.

Your rights and complaints

Subject to POPIA's conditions, you may ask whether we hold your personal information, request access or correction, object to qualifying processing, or request deletion where appropriate. Where processing relies on consent you may withdraw it, without affecting prior lawful processing. Identity verification may be needed to protect your information. Send requests to enquiries@csartstudio.co.za. Access to records under the Promotion of Access to Information Act 2 of 2000 (PAIA) follows its prescribed process, including Form 2 where applicable. This notice is not a PAIA manual; the studio must confirm its Information Officer and applicable manual obligations. You may complain to the South African Information Regulator. Current complaint procedures and contact details are available at https://inforegulator.org.za/ and PAIA forms at https://inforegulator.org.za/paia-forms/. Official POPIA text: https://justice.gov.za/legislation/acts/2013-004.pdf