Privacy policy

Last updated: 12 October 2026

Who we are

Stryx Collective (Pty) Ltd, registration number 2024/112638/07, is a web design and SEO consultancy registered in South Africa. We are the responsible party (the controller, in UK and EU terms) for the personal information described in this policy. Our director and information officer is Ryan Cumming.

What this policy covers

This policy covers personal information about people who visit stryxcollective.com, people who contact us, and our clients, suppliers and the people we deal with at those businesses.

It does not cover personal information we handle for clients, such as enquiries sent through a client's website that we host or maintain. In that work the client is the responsible party and we act as its operator under our service agreement. If your question is about a client's website, please contact that business.

Our POPIA and PAIA page explains how to make a request under South African law and holds our PAIA manual. Our cookie policy lists every cookie this website uses, and our website terms of use cover how you may use the site.

Information we collect

Information you give us

When you email us, call us or message us on WhatsApp, we receive what you choose to send. This is usually your name, email address, phone number, business name, website address and the content of your message.

If you become a client, we also keep your billing details, our agreement, project correspondence, and the files and logins you share with us so we can do the work.

This website has no contact form, booking tool, live chat or newsletter sign-up at the moment.

Information from other people

If someone refers you to us and passes on your details, we use them only to contact you about that referral. If you work for one of our clients, the client may give us your name and contact details so that we can work with you on its project.

Information collected automatically

Cloudflare, which delivers this website, records technical information when you visit, such as your IP address, browser type, the pages requested and the time of the request. This is used to deliver the site and protect it from attacks.

Cloudflare Web Analytics counts every visit without cookies: it records the page, where the visit came from, your country, your browser and device type, and how fast the page loaded. It stores nothing on your device, does not fingerprint your browser or follow you across websites, and gives us only totals, not information about you as an individual.

If you accept analytics cookies, Google Analytics, loaded through Google Tag Manager, records how the site is used: pages viewed, how you arrived, your device and browser, an approximate location, and which links you click, such as our WhatsApp and email links. It also records that one of our free tools was used, but not what you type into it. Until you accept, neither Google Tag Manager nor Google Analytics loads.

The free tools on this site run in your browser. The UTM builder keeps a list of your recent links in your own browser's local storage, and that list is never sent to us.

If you accept advertising cookies, Google Ads measures which of our adverts led to your visit or enquiry, and may use your visit to show our adverts to people who have visited this website. We do not use the Meta Pixel or any other advertising network.

Information we do not ask for

We do not ask for special personal information, such as health details, and this website is not aimed at children. Please do not send us this kind of information.

Why we use your information

We use personal information to:

Under section 11 of POPIA we rely on your consent for analytics cookies, on the need to conclude or carry out a contract with you, on our legal obligations (such as keeping tax records), and on our legitimate interest in replying to people who contact us, keeping our systems secure and counting visits without cookies.

We do not sell personal information. We do not make decisions about you by automated means alone, and we do not profile you.

Whether you have to give us information

Giving us your information is voluntary. Without your contact details we cannot reply to you or prepare a quote. If you become a client, we need your business name, address and billing details to invoice you, and the Companies Act and the Tax Administration Act require us to keep those records.

Direct marketing

We do not send marketing emails or newsletters, or make marketing calls, at present. We may do so in future. If we do:

You can object to direct marketing at any time, and we will stop.

Who we share it with

We share personal information only where there is a reason to. These service providers process it for us under terms that require them to protect it:

We may also share information with our professional advisers, such as our accountant or lawyer, where needed, and with a regulator, court or other authority where the law requires it.

Where your information is processed

Our service providers process information in South Africa, the United Kingdom, the European Union and the United States. When personal information leaves South Africa, we send it only as section 72 of POPIA allows. We rely on each provider's data protection terms, including standard contractual clauses where the provider offers them, or on the transfer being needed to reply to you or to carry out our agreement with you.

How long we keep it

How we protect it

We take reasonable technical and organisational steps to protect personal information against loss, damage and unauthorised access. These include limiting who can reach it, securing the accounts that hold it, encrypting traffic to this website and keeping backups. No system is completely secure. If we have reasonable grounds to believe your personal information has been accessed or acquired by someone unauthorised, we will tell the Information Regulator and you, as section 22 of POPIA requires.

Your rights under POPIA

You have the right to:

Requests are free, and you do not need a form: email, WhatsApp, a phone call or a letter will do. We may need to confirm your identity first. Our POPIA and PAIA page explains how to make a request and gives the Information Regulator's full contact details. You can complain to the Regulator through its eServices portal or by calling 010 023 5200.

If you are in the United Kingdom or the European Union

The UK GDPR or the EU GDPR may apply to how we handle your information. Our lawful bases are:

You have the right to access your information, have it corrected or erased, restrict how we use it, object to our use of it, and receive it in a portable format. If you have a complaint, please contact us first: we will acknowledge it within 30 days and keep you informed. You can also complain to the Information Commissioner's Office in the UK, or to the data protection authority in the EU country where you live or work.

If you are in the Cayman Islands

We work with businesses in the Cayman Islands. If you are there, you can contact us about your personal information in the same way as anyone else, and we will deal with your request under this policy. You may also contact the Office of the Ombudsman, which oversees data protection in the Cayman Islands. If we handle your information on behalf of a Cayman Islands client, that client is responsible for it under the Cayman Islands Data Protection Act.

If you are in California

Links to other websites

This website links to other websites. We are not responsible for how those websites handle personal information, so please read their own privacy policies.

Changes to this policy

We will update this policy when our tools, services or the law change, and change the "Last updated" date at the top. This version takes effect on 12 October 2026.

Contact

For any question about this policy or your personal information, email ryan@stryxcollective.co.za, message us on WhatsApp at +27 67 469 3193 or use our contact page.