Your privacy

Conversation Lab (“we”, “us”, “our”) is a full-stack, AI-powered growth agency operating across South Africa and the United Kingdom. We are committed to protecting your privacy and handling your personal information responsibly, in line with the Protection of Personal Information Act, 2013 (POPIA) in South Africa and the UK General Data Protection Regulation (UK GDPR).

This policy applies to personal information we collect through this website.

Information we collect

Information you give us. When you complete our contact form or otherwise get in touch, we collect your name, email address, and any details you choose to share in your enquiry (for example, about your business or the help you are looking for).

Information collected automatically. When you visit the site we may collect standard technical and usage information - such as your device and browser type, approximate location, pages viewed, and how you arrived at the site - through cookies and similar technologies. This only happens where you have accepted analytics or marketing cookies. See our Cookie Policy for detail and your choices.

How we use your information

We use your personal information to:

• respond to your enquiry and provide the information or services you request;
• operate, maintain, and improve our website and services;
• measure and understand how our website is used (with your consent); and
• send you relevant marketing communications where you have agreed to receive them.

Legal basis for processing

Where the UK GDPR applies, we rely on the following legal bases: your consent (for analytics and marketing cookies and for marketing communications), our legitimate interests (to respond to enquiries and to operate and secure our website), and the performance of a contract (where you engage us for services). Under POPIA, we process your information on the basis of your consent, our legitimate interests, and to conclude or perform under a contract with you.

Cookies and tracking

We use cookies and similar technologies for essential site functions and, with your consent, for analytics and marketing. Non-essential cookies stay switched off until you accept them via our consent banner. Full detail is in our Cookie Policy.

Sharing your information

We do not sell your personal information. We share it only with:

• service providers who help us run our website and business - such as our hosting and content-delivery provider (Cloudflare), analytics and advertising providers (for example, Google), and email delivery services - who process it on our behalf under appropriate safeguards; and
• authorities or third parties where we are required to do so by law.

International transfers

We operate in South Africa and the United Kingdom, and some of our service providers are based elsewhere. Where personal information is transferred across borders, we take reasonable steps to ensure it is protected in line with POPIA and the UK GDPR, including using providers that offer adequate safeguards.

How long we keep your information

We keep personal information only for as long as necessary for the purposes described in this policy - for example, to respond to and follow up on your enquiry - and thereafter for as long as needed to meet our legal, accounting, or reporting obligations, after which it is securely deleted.

Your rights

Depending on where you are, you have rights over your personal information, including the right to:

• access the personal information we hold about you;
• ask us to correct or update inaccurate or incomplete information;
• ask us to delete your information;
• object to or ask us to restrict certain processing; and
• withdraw consent at any time (this does not affect processing carried out before withdrawal).

Under the UK GDPR you also have the right to data portability. To exercise any of these rights, contact us using the details below.

Complaints

If you have a concern about how we handle your personal information, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with a supervisory authority: in South Africa, the Information Regulator (inforegulator.org.za); in the United Kingdom, the Information Commissioner’s Office (ico.org.uk).

Security

We take appropriate technical and organisational measures to protect your personal information against loss, misuse, and unauthorised access, including transport encryption and access controls. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

Children

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “last updated” date above. Please review it periodically.

Contact us

If you have any questions about this policy or how we handle your personal information, contact us at info@conversationlab.com.