1. Introduction

African Imaginary (“we”, “us”, or “our”) operates the website at https://africanimaginary.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit the Site.

We respect your privacy and are committed to handling your personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) of South Africa, and where applicable, the EU General Data Protection Regulation (GDPR) for visitors from the European Economic Area and the UK.

By using the Site, you consent to the practices described in this policy. If you do not agree, please discontinue use of the Site.

2. Who We Are (Responsible Party)

For the purposes of POPIA, the Responsible Party is:

• Name: The African Imaginary (Pty) LTD
• Registered address: 3 Glen Avenue, Gardens, Western Cape 8001, South Africa
• Email: info@africanimaginary.com

3. Information We Collect

We collect the following categories of personal information:

Information you provide directly

• Name, email address, and any message content when you complete a contact form, subscribe to a newsletter, or correspond with us.
• Account details (username, email, password) if you register an account on the Site.
• Comments and any content you voluntarily submit.

Information collected automatically

When you visit the Site, we automatically collect:

• IP address and approximate location
• Browser type, operating system, and device information
• Pages visited, time spent on pages, referring URLs
• Date and time of visits

This information is collected through cookies, server logs, and similar technologies.

Information from third parties

We may receive information about you from third-party services we use (for example, analytics providers or social media platforms if you interact with our content there).

4. How We Use Your Information

We process your personal information for the following purposes:

• To operate, maintain, and improve the Site
• To respond to your enquiries and provide requested information or services
• To send newsletters or marketing communications (only where you have opted in)
• To analyse Site usage and visitor behaviour in order to improve our content and user experience
• To comply with legal obligations
• To protect the security and integrity of the Site
• To detect and prevent fraud or unauthorised activity

Under POPIA and GDPR, our lawful bases for processing include: your consent, the performance of a contract with you, our legitimate interests (operating and improving the Site), and compliance with legal obligations.

5. Cookies and Tracking Technologies

The Site uses cookies and similar technologies to function properly and to understand how visitors interact with our content.

Types of cookies we use:

• Strictly necessary cookies — required for the Site to function (e.g. session management, security).
• Analytics cookies — help us understand how visitors use the Site. [WE USE / WE DO NOT USE] Google Analytics for this purpose.
• Functional cookies — remember your preferences (e.g. language, accessibility settings).
• Marketing cookies — [IF APPLICABLE: used to deliver relevant advertising; otherwise remove this line].

You can control cookies through your browser settings. Disabling certain cookies may affect Site functionality. Where required, we will request your consent before placing non-essential cookies via a cookie banner.

6. Third-Party Services

We may share information with the following categories of third parties:

• Hosting and infrastructure providers — to operate the Site.
• Analytics providers — such as [Google Analytics / other], to understand Site usage.
• Email service providers — to deliver newsletters or transactional emails.
• Embedded content — pages on this Site may include embedded content (videos, images, social media posts) from third parties such as YouTube, Vimeo, or social platforms. These third parties may collect data about you, set their own cookies, and track your interaction with that content according to their own privacy policies.
• Legal and regulatory authorities — where required by law, court order, or to protect our rights.

We do not sell your personal information.

7. International Data Transfers

If we transfer your personal information outside of South Africa or the EEA, we will ensure appropriate safeguards are in place as required by POPIA (Section 72) and GDPR, including standard contractual clauses or transfers to jurisdictions with adequate data protection laws.

8. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

• Contact form submissions: 2 years
• Newsletter subscriber data: until you unsubscribe
• Account data: for the lifetime of your account, plus 30 days after deletion
• Server logs: 90 days

When personal information is no longer needed, we will securely delete or anonymise it.

9. Your Rights

Under POPIA and GDPR (where applicable), you have the following rights:

• Right to access — request a copy of the personal information we hold about you.
• Right to correction — request that we correct inaccurate or incomplete information.
• Right to deletion — request that we delete your personal information, subject to legal exceptions.
• Right to object — object to the processing of your personal information, including for direct marketing.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.
• Right to data portability (GDPR) — receive your data in a structured, machine-readable format.
• Right to lodge a complaint — with the Information Regulator (South Africa) or your local data protection authority.

To exercise any of these rights, contact us at [CONTACT EMAIL]. We will respond within a reasonable period and in accordance with applicable law.

Information Regulator (South Africa):

Website: https://inforegulator.org.za

Email: complaints.IR@justice.gov.za

10. Security

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include secure hosting, encrypted connections (HTTPS), access controls, and regular security reviews.

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

In the event of a security breach affecting your personal information, we will notify you and the Information Regulator as required by POPIA.

11. Children’s Privacy

The Site is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

12. Links to Other Websites

The Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any website you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last updated” date. Material changes will be communicated more prominently (e.g. via a notice on the Site or by email where appropriate).

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact:

• Name: The African Imaginary (Pty) LTD
• Registered address: 3 Glen Avenue, Gardens, Western Cape 8001, South Africa
• Email: info@africanimaginary.com

This Privacy Policy was last reviewed on 18 May 2026.