Privacy policy.

1. Who we are

Ikonik Studio is an independent digital studio based in Randburg, Gauteng, South Africa. You can reach us at hi@ikonikdigital.co.za.

2. What information we collect

Information you give us directly

• Contact form & brief submissions: name, email, company, location, project type, budget range and the brief you send us.
• Direct email, phone or WhatsApp: whatever you choose to share.
• Client work engagements: billing details, project access credentials (with your consent), analytics account access.

Information collected automatically

• Usage data: browser type, operating system, pages viewed, referrer, and approximate location (city/country only, no precise geolocation).
• Cookies: only strictly-necessary session cookies and privacy-safe analytics.

3. Why we collect it (lawful basis)

• To reply to your brief or enquiry, legitimate interest / performance of a contract.
• To deliver client work, performance of a contract.
• To improve our site and services, legitimate interest.
• To comply with legal obligations, tax, accounting, POPIA/GDPR requests.

4. How long we keep it

Brief submissions and correspondence: up to 3 years unless we become active clients. Client project files, contracts and financial records: 7 years in line with South African tax law. Usage/analytics data: up to 26 months.

5. Who we share it with

We do not sell your personal information. We share it only with:

• Service providers we use to run the studio, email, hosting, CRM, invoicing, cloud storage. All bound by data processing agreements consistent with POPIA and GDPR.
• Authorities, only if legally required.

A short list of providers we typically use: Google Workspace (email, docs), Notion (project docs), HubSpot or similar (CRM), Xero (invoicing), major hosting providers. On specific client engagements you'll always know which tools we're using, it's in the written scope.

6. Where your data lives

Some of our service providers store data outside South Africa or the EU (typically in the US, EU or Ireland). Where cross-border transfers happen, we rely on Standard Contractual Clauses and provider-level POPIA/GDPR commitments to protect your data.

7. Your rights

Under POPIA (South Africa)

• Right to know what personal information we hold about you
• Right to correct or delete inaccurate information
• Right to object to processing
• Right to lodge a complaint with the Information Regulator of South Africa

Under GDPR (EU clients)

• Right of access, you can request a copy of the personal data we hold
• Right to rectification, erasure, restriction & portability
• Right to object to processing
• Right to lodge a complaint with your local supervisory authority

To exercise any of these rights, email hi@ikonikdigital.co.za and we will respond within 30 days.

8. How we protect your data

Access to client and prospect data is limited to the studio team who need it. Files are stored on encrypted providers with two-factor authentication. Sensitive credentials (client hosting logins, payment info) live in an encrypted password manager, never in email or plain-text notes.

9. Cookies & tracking

This site uses strictly-necessary session cookies. If we run privacy-safe analytics (typically Plausible, Fathom or similar), we do so without cookies or personal identifiers. We do not embed Facebook Pixel, Google Ads tracking or other cross-site tracking on this site.

10. Third-party links

This site links to third-party sites (case study clients, service documentation, external tools). Their privacy policies apply once you leave ours.

11. Children's privacy

This site is not directed at children under 18 and we do not knowingly collect personal information from them.

12. Changes to this policy

We may update this policy occasionally. Material changes will be noted at the top with a revised "Last updated" date. Continued use of the site after changes means you accept the updated policy.

13. How to contact us

Data subject requests, privacy questions or concerns can be sent to hi@ikonikdigital.co.za.