Get It Right Digital (GIR Digital)

Effective date: 08 February 2026  |  Last updated: 08 February 2026

1. Who we are

Get It Right Digital (GIR Digital) is a South African sole proprietorship.

Responsible party (POPIA) / controller: [Your full legal name], trading as Get It Right Digital.

Information Officer (POPIA): [Your full legal name].

Email: [privacy@girdigital…]

Business address: [Your business address], South Africa.

2. What this Privacy Policy covers

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you:

visit our website (the “Website”)

contact us, request a quote, or book a call

submit your details via our marketing (including lead forms on platforms such as Google and Meta)

subscribe to updates/newsletters (when available)

become a client or supplier, or communicate with us about our services.

3. Personal information we collect

Depending on how you interact with us, we may collect:

Identity and contact details: name, email address, phone number, company name, job title.

Communications: messages you send us (via WordPress or HubSpot forms, email) and related notes.

Website usage data: IP address, browser/device information, pages viewed, approximate location, referral URLs, and similar analytics data.

Marketing preferences: your opt-in/opt-out choices and cookie preferences.

Lead information: where you submit a lead form on an advertising platform, we may receive the details you provided through that platform’s lead delivery tools/dashboards.

Client/service data: business contact details for client teams and, where relevant, personal information we process on a client’s behalf (see section 11).

We do not intentionally collect special personal information (e.g., health, biometric, children’s data) through the Website.

4. How we collect personal information

We collect personal information:

directly from you (e.g., WordPress or HubSpot forms, email)

automatically (e.g., through cookies, Google Analytics 4 and Google Tag Manager, and social/marketing tags where enabled)

from third parties you use (e.g., if you submit a lead via Meta or Google lead ads, those platforms may share your lead details with us).

5. Why we process personal information (purposes)

We process personal information to:

respond to enquiries and provide quotes or information

deliver our services (digital marketing consulting, audits, reporting, and project delivery)

operate, maintain, secure and improve the Website (performance monitoring, analytics, troubleshooting, and user experience)

send newsletters or updates (when available) where you have opted in (we plan to use double opt-in)

comply with legal obligations and manage disputes.

6. Lawful grounds for processing

Under POPIA, we process personal information lawfully and reasonably. Depending on context, our processing is based on:

your consent (e.g., newsletter subscription and certain cookies/tags)

taking steps to enter into or perform a contract with you (e.g., delivering services)

compliance with legal obligations

our legitimate interests (e.g., operating our business, securing systems, improving the Website), balanced against your rights.

If you withdraw consent, it does not affect processing that happened before you withdrew it.

7. Cookies, analytics, and social/marketing tags

We use cookies and similar technologies to run the Website and understand how visitors use it. We may also use social/marketing tags to measure and improve advertising performance.

Tools we may use include:

Google Analytics 4 (GA4)

Google Tag Manager (GTM)

social/marketing tags (e.g., Meta and other platform tags).

Where required, we will ask for your consent before placing non-essential cookies/tags. You can also manage cookies via your browser settings. Disabling some cookies may affect Website functionality.

8. How we share personal information

We may share personal information with trusted service providers (operators/processors) to run the Website and our business, including:

website hosting and infrastructure providers

HubSpot (forms/CRM and related tools)

analytics providers (e.g., Google)

advertising platforms (e.g., Meta and Google) where you engage with lead forms or our ads.

We do not sell personal information.

We may disclose personal information where required by law, or to protect our rights and systems.

9. International transfers

Some service providers (for example, analytics, marketing tags, and CRM providers) may process or store personal information outside South Africa. Where cross-border transfers occur, we take reasonable steps to ensure appropriate safeguards are in place and that transfers are lawful.

10. Data retention

We keep personal information only as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.

Typical retention approach:

Enquiry records: usually up to 24 months after last contact (unless needed longer for a dispute).

Newsletter subscriptions: until you unsubscribe.

Client records: for the duration of the engagement and for a period afterwards for legal, tax, and audit purposes.

11. Client data processed on behalf of clients

When delivering services, we may process personal information on behalf of clients (for example, accessing campaign dashboards, lead data, analytics, or CRM information). In those cases:

the client remains the responsible party/controller for that client data

we act as an operator/processor and process the data only on documented client instructions and for agreed services

we apply appropriate confidentiality and security measures

Where appropriate, we can enter into a Data Processing Agreement (DPA) with clients covering security, sub-processors, and breach notifications.

12. Security

We implement reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, alteration, and destruction.

If a security compromise occurs, we will take steps required by applicable law, including notification to the Information Regulator and affected data subjects where applicable.

13. Your rights

You may request to:

access the personal information we hold about you

correct or update inaccurate information

object to processing in certain cases (including direct marketing)

withdraw consent where processing is based on consent.

To exercise these rights, contact us using the details in section 1. We may need to verify your identity before actioning a request.

14. Direct marketing

If we send marketing communications, we will do so in line with applicable law. You can opt out at any time by using the unsubscribe link or by contacting us.

15. Children

Our Website and services are not directed at children and we do not knowingly collect children’s personal information via the Website.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be posted on the Website and will apply from the “Last updated” date.

17. Complaints

If you have a complaint about how we handle personal information, please contact us first so we can try to resolve it.

You may also lodge a complaint with the Information Regulator (South Africa).

Disclaimer: This Privacy Policy is provided for general information and does not constitute legal advice. Replace the bracketed placeholders with your exact details before publishing.