Privacy Policy

When you contact us or use our services, we collect information you provide directly:

• Personal details: name, email address, phone number

• Business information: company name, website URL, business description

• Project details: requirements, preferences, feedback

• Payment information: processed securely through third-party payment processors (we do not store credit card details)

We also collect technical information automatically when you visit our website:

• Browser type and version

• Device information and operating system

• IP address and location data

• Pages visited, time spent, and referring websites

• Cookies and similar tracking technologies (see Cookie Policy below)

We use your information solely to provide and improve our services:

• Communication: Responding to inquiries, providing updates, and sharing project deliverables

• Service delivery: Building and maintaining your website, managing hosting and technical support

• Business operations: Processing payments, maintaining records, and fulfilling legal obligations

• Website improvement: Analyzing usage patterns to enhance user experience and functionality

• Marketing: Sending relevant updates about our services (you can opt out anytime)

We will never sell, rent, or share your personal information with third parties for their marketing purposes.

We take your data security seriously and implement industry-standard protections:

• Secure hosting: Your data is stored on secure servers with encryption

• Access controls: Limited employee access on a need-to-know basis

• Regular backups: Daily automated backups to prevent data loss

• SSL encryption: All data transmission is encrypted using HTTPS

• Physical security: Servers located in secure, monitored facilities

Data retention: We retain your information for as long as necessary to provide our services and meet legal obligations. When you terminate your service, we will securely delete your data within 90 days unless legally required to retain it longer.

We use trusted third-party services to operate our business:

• Web hosting: Vercel (United States) - website hosting and deployment

• Analytics: Google Analytics - website traffic analysis with anonymized IP addresses

• Email delivery: Web3Forms - contact form submissions

• Payment processing: Payment gateway providers for secure transaction processing

• Communication: Email service providers for project updates and support

These providers may access your information only to perform services on our behalf and are obligated to protect your data. We carefully select partners with strong privacy practices and GDPR/POPIA compliance.

South Africa's Protection of Personal Information Act (POPIA) grants you specific rights:

• Access: Request a copy of the personal information we hold about you

• Correction: Request corrections to incomplete or inaccurate information

• Deletion: Request deletion of your personal information (subject to legal obligations)

• Objection: Object to processing of your information for direct marketing

• Portability: Request your data in a structured, commonly used format

• Withdraw consent: Revoke consent for data processing where consent was the legal basis

To exercise these rights, contact us at privacy@originburrow.com. We will respond within 30 days and verify your identity before processing requests.

Our website uses cookies to enhance your experience and analyze site performance:

Essential cookies: Required for basic site functionality (login sessions, form submissions)

Analytics cookies: Help us understand how visitors use our site (Google Analytics with IP anonymization)

Preference cookies: Remember your settings and preferences

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality. We do not use advertising or tracking cookies.

As we use international hosting and service providers, your data may be transferred outside South Africa. When this occurs:

• We ensure adequate data protection measures are in place

• Service providers comply with GDPR and equivalent standards

• Data transfer mechanisms meet POPIA requirements

• Your information receives the same level of protection regardless of location

Our services are designed for businesses and professional use. We do not knowingly collect information from individuals under 18 years of age. If we discover we have inadvertently collected such information, we will delete it immediately.

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make significant changes:

• We will update the "Last Updated" date

• We will notify active clients via email

• The updated policy will be posted on our website

Continued use of our services after changes constitutes acceptance of the updated policy.

For questions, concerns, or requests regarding this Privacy Policy or your personal information:

Email: privacy@originburrow.com

General inquiries: hello@originburrow.com

Mailing address: Cape Town, South Africa

We aim to respond to all privacy inquiries within 48 hours during business days.