Last updated: May 2025  |  Brandgravity (Pty) Ltd

1. Who We Are

Brandgravity (Pty) Ltd ("Brandgravity", "we", "us") is a corporate event production company registered in South Africa, operating from Carlswald, Midrand, Johannesburg. We are subject to the Protection of Personal Information Act 4 of 2013 (POPIA) and, where applicable to individuals in the European Economic Area or United Kingdom, the General Data Protection Regulation (GDPR / UK GDPR).

Our Information Officer can be contacted at: david@brandgravity.co.za

2. What Personal Information We Collect

We collect only the information you voluntarily provide to us through this website. This includes:

• Contact and identity information: full name, company name, job title
• Contact details: email address, telephone number
• Project information: event type, budget range, timeline, and any other details you include in a brief or enquiry form

We do not collect sensitive personal information (as defined under POPIA) or special category data (as defined under GDPR), and we do not collect information from children under the age of 18.

This website does not use tracking cookies, analytics platforms, or advertising networks. The only third-party request made by this site is loading fonts from Google Fonts, which may log your IP address in accordance with Google's Privacy Policy.

3. How We Use Your Information

We use your personal information solely for the following purposes:

• To respond to your enquiry or project brief
• To assess whether we are the right fit for your project
• To communicate with you regarding a proposed or active engagement
• To fulfil any contractual obligations where a project proceeds
• To comply with our legal and regulatory obligations

We will never use your information for unsolicited marketing, and we will never sell, rent, or trade your personal information to any third party.

4. Legal Basis for Processing

Under GDPR / UK GDPR, we rely on the following lawful bases:

• Legitimate interests (Article 6(1)(f)): responding to business enquiries and maintaining client relationships, where our interests do not override your rights
• Pre-contractual necessity (Article 6(1)(b)): where processing is required to respond to your project brief and enter into an agreement
• Legal obligation (Article 6(1)(c)): where processing is required to comply with applicable law

Under POPIA, processing is justified on the grounds of the legitimate interests of the responsible party or a third party (section 11(1)(f)), and for the performance of a contract (section 11(1)(e)).

5. Who We Share Your Information With

We do not share your personal information with third parties except in the following limited circumstances:

• Form processing: Enquiry forms on this site are processed by Formspree, Inc. (formspree.io), a US-based service that transmits form submissions to us by email. Formspree acts as an operator/data processor. Their privacy policy is available at formspree.io/legal/privacy-policy.
• Service providers: We may share information with trusted suppliers or sub-contractors directly involved in producing your event, under strict confidentiality obligations.
• Legal requirements: We may disclose information if required to do so by law or in response to a valid request from a public authority.

When we transfer personal information outside South Africa (for example, when using Formspree's US-based servers), we take steps to ensure an adequate level of protection consistent with POPIA and GDPR requirements.

6. How Long We Retain Your Information

• Enquiries that do not proceed: We retain your information for up to 12 months from the date of last contact, after which it is securely deleted.
• Active and completed projects: We retain project records, including personal information, for 7 years from project completion, in line with South African commercial and tax record-keeping requirements.

You may request earlier deletion of your information at any time (see Your Rights below), subject to any legal retention obligations we are required to comply with.

7. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal information:

• Right of access: You may request a copy of the personal information we hold about you.
• Right to correction: You may ask us to correct inaccurate or incomplete information.
• Right to deletion (erasure): You may request that we delete your personal information, subject to any legal obligations that require us to retain it.
• Right to object: You may object to processing based on legitimate interests.
• Right to restrict processing: You may ask us to limit how we use your information in certain circumstances.
• Right to data portability (GDPR): You may request your data in a structured, machine-readable format where processing is based on consent or contract.

To exercise any of these rights, contact us at david@brandgravity.co.za. We will respond within 30 days. We may need to verify your identity before processing your request.

8. Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. All data submitted through this site is transmitted over encrypted HTTPS connections. Access to personal information is restricted to authorised personnel only.

While we take every reasonable precaution, no internet transmission is completely secure, and we cannot guarantee absolute security.

9. Complaints

If you believe we have not handled your personal information appropriately, please contact us first at david@brandgravity.co.za and we will work to resolve the matter.

If you remain dissatisfied, you have the right to lodge a complaint with the relevant supervisory authority:

• South Africa (POPIA): The Information Regulator — www.justice.gov.za/inforeg/
• European Union (GDPR): The supervisory authority in your EU member state of residence
• United Kingdom (UK GDPR): The Information Commissioner's Office (ICO) — ico.org.uk

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this policy reflects when the most recent changes were made. We encourage you to review this policy periodically. Continued use of this website after any changes constitutes acceptance of the revised policy.

11. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or how we handle your personal information, please contact:

David Newton — Information Officer
Brandgravity (Pty) Ltd
Carlswald, Midrand, Johannesburg, South Africa
Email: david@brandgravity.co.za