Privacy Policy

1. Who we are

This website, reinvented.digital, is operated by Reinvented Digital (Pty) Ltd (registration number 2026/793598/07), a private company registered in South Africa, of 2 Lansdowne Crescent, Durban North 4051, South Africa. Reinvented Digital (Pty) Ltd is the "responsible party" under South Africa's Protection of Personal Information Act 4 of 2013 (POPIA) and, where the EU General Data Protection Regulation (GDPR) applies to you, the "controller" of the personal information described here. In this policy, "we" and "us" mean Reinvented Digital (Pty) Ltd.

Our Information Officer is our director, Willem Pretorius. Contact us, or the Information Officer, about anything in this policy at privacy@reinvented.digital.

2. Scope

This policy covers this website and the enquiry process that starts on it. Information that a client shares with us during a paid engagement is handled under the agreement and non-disclosure terms for that engagement, not under this policy.

3. What we collect

Information you give us

When you submit the briefing request form:

• your name and job title,
• your work email address,
• your organisation,
• the infrastructure environment and strategic objective you select, and
• the date and time of your request.

Please do not include sensitive information (such as health, financial account, or government ID details) in the form. We do not need it.

After you submit the form we send an automatic confirmation email to the address you entered, through our email provider Brevo. It repeats only the infrastructure and objective you selected, not your name or organisation.

Questions you ask the site assistant

If you use the "Ask a Question" assistant, the text of your question is sent to Cloudflare Workers AI. This is an AI service that runs a language model (Meta's Llama) on Cloudflare's infrastructure and writes an answer from the public pages of this site. We do not send your name or contact details with it, and we do not store or log the text of your question. To avoid repeating identical work, we keep the generated answer, but not your question, in Cloudflare's cache for up to 24 hours, identified only by a one-way hash of the question. Please do not include personal or confidential information in your question. Answers are produced automatically, may be incomplete or wrong, and are not professional advice.

Information collected automatically

When you visit the site, our infrastructure provider, Cloudflare, processes technical data such as your IP address, browser and device type, the pages requested, and timestamps. This is needed to deliver the site, keep it secure and measure overall traffic. When you use the form or the site assistant, Cloudflare's Turnstile check also looks at browser signals to tell people from automated bots, and our server briefly counts your IP address's requests to limit abuse.

4. Why we use it, and our legal basis

• To respond to your enquiry and arrange a briefing. This is necessary to take steps at your request before a possible contract, and you consent to this use when you submit the form.
• To answer your question when you use the site assistant. You choose to submit the question, and we process it only to produce the answer.
• To keep the site secure and prevent abuse (bot checks, rate limiting, security logs). This is our legitimate interest in protecting the site and its visitors.
• To understand overall traffic through aggregate, cookie-free analytics. This is our legitimate interest in improving the site.
• To meet legal obligations, where the law requires us to keep or disclose information.

We do not make decisions about you by automated means. The site assistant writes answers automatically from our public pages, but it does not decide anything about you. We will not add you to a marketing list without asking you first.

5. Who we share it with

We do not sell or rent personal information. We use three service providers, who process information on our behalf:

Cloudflare states that it does not use content sent to Workers AI to train AI models or to improve its own or third-party services. Please see Cloudflare's own documentation for its current terms.

We may also disclose information where the law requires it, or to protect our rights or the safety of others.

6. Transfers outside your country

Cloudflare, Google and Brevo run global infrastructure, so your information may be processed outside South Africa and outside the European Economic Area, including in the United States. We rely on the safeguards these providers offer, such as their data processing terms and standard contractual clauses, so that your information stays protected as POPIA (section 72) and the GDPR require.

7. Cookies and analytics

We do not set cookies of our own, and we do not use advertising or cross-site tracking. Our fonts, icons and scripts are hosted on our own domain, so your browser does not contact Google Fonts or similar services when you load the site.

We use Cloudflare Web Analytics to count visits and see which pages are used. Cloudflare describes it as privacy-first: it does not use cookies or track individuals across sites. The Turnstile checks on the form and the site assistant are provided by Cloudflare and may use limited browser signals to verify that you are human.

8. How long we keep it

• Enquiries and related emails: up to 24 months from our last contact with you, then deleted, unless we need to keep them longer to meet a legal obligation or because you have become a client (in which case the engagement agreement applies).
• Request counters used for rate limiting: seconds to minutes.
• Assistant questions and answers: not stored by us; a cached copy of an answer, keyed to a hash of the question, expires after 24 hours.
• Server logs and analytics data held by Cloudflare: according to Cloudflare's own retention periods.

9. How we protect it

We use encrypted connections (HTTPS with HSTS), strict browser security headers, bot verification and rate limiting on the form and the site assistant, and we restrict access to the mailbox that receives enquiries to the company's director. No system is completely secure, but we work to keep your information safe and will notify you and the relevant regulator if a breach affecting your information occurs, as the law requires.

10. Your rights

Under POPIA, and under the GDPR where it applies to you, you may:

• ask whether we hold information about you, and request a copy;
• ask us to correct or delete it;
• object to, or ask us to restrict, our processing of it;
• withdraw your consent at any time (this does not affect processing already done); and
• where the GDPR applies, ask for a portable copy of information you provided to us.

To exercise any of these rights, email privacy@reinvented.digital. We may need to confirm your identity first, and we aim to respond within 30 days.

If you are unhappy with how we handle your information, please contact us first so we can put it right. You also have the right to complain to the Information Regulator (South Africa), or, if you are in the EU or UK, to your local data protection authority.

11. Children

This website is aimed at business professionals and is not intended for anyone under 18. We do not knowingly collect information from children.

12. Changes to this policy

If our practices change, for example if we add a new service provider, we will update this page and the "Last updated" date above.