RlR Design (Pty)Ltd Privacy Policy
RlR Design (Pty) Ltd
Registration Number: 2026/388620/07
Last Updated: May 2026
​
Important Notice on Managing Your Privacy Settings:
​
You have full control over your personal data and cookie preferences on our website. You can view, change, or withdraw your privacy settings at any time by clicking on the blue button located in the bottom left-hand corner of this Privacy Policy page.
​
1. Introduction and Scope
This Privacy Policy outlines how RlR Design (Pty) Ltd ("the Company", "we", "us", or "our") collects, uses, stores, and protects your personal information when you visit our website, communicate with us, or engage our Branding, Audio Branding, Web Design or Digital Marketing services.
​
In terms of the Protection of Personal Information Act No. 4 of 2013 (POPIA), RlR Design (Pty) Ltd operates as the "Responsible Party" (and as a "Data Controller" under the General Data Protection Regulation (GDPR)). This policy applies to all visitors to our website, prospective clients, and active clients.
​
2. Information We Collect
We collect personal information to provide you with efficient, tailored design and development services. This data is gathered through two primary channels:
​
2.1 Information Provided Directly by You
​
Contact & Enquiries: Name, email address, phone number, and company name provided via our website contact forms, WhatsApp, email communications, or other platform messaging apps.
​
Client Onboarding & Project Briefs: Billing addresses, company registration details, VAT numbers, brand assets, target audience insights, and technical access credentials necessary to complete design or web development projects.
​
2.2 Information Collected Automatically
​
Device and Usage Data: IP addresses, browser types, operating systems, referring URLs, and details of how you interact with our website.
​
Cookies and Tracking Technologies: We use cookies and web beacons to optimise website performance, remember your preferences, and gather data. Specifically, our website uses Google Analytics (GA4) to track visitor behaviour and site traffic patterns, and Google Ads tracking tags to deliver, measure, and optimise targeted marketing campaigns based on your interaction with our services.
​
3. Purpose of Processing
We will only process your personal information for lawful purposes aligned with our business operations, including:
​
-
Project Delivery: Fulfilling our contractual obligations to execute web design, development, and content creation briefs.
​
-
Client Communication: Responding to quotes, managing active projects, and providing ongoing technical support.
​
-
Invoicing & Administration: Processing payments, managing accounts, and meeting statutory financial record-keeping obligations in South Africa.
​
-
Marketing & Analytics: Analysing website traffic via GA4 to refine our user experience, and managing organic and paid marketing campaigns via Google Ads to promote our services to relevant audiences.
​
4. Consent and Choice
By interacting with our website, completing a contact form, or entering into a service agreement with us, you consent to the processing of your personal information in accordance with this policy.
​
-
Right to Withdraw: You have the right to withdraw your consent for us to process your data at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal, nor does it affect processing required to execute a binding contract or comply with legal obligations.
​
-
Managing Cookies: Aside from using the on-page privacy settings button highlighted at the top of this policy, you can configure your internet browser to refuse cookies or alert you when cookies are being sent. However, doing so may impact the functionality of certain areas of our website.
​
5. Third-Party Disclosures
We respect your privacy and will never sell, rent, or trade your personal information to third parties for marketing purposes. We only share data with trusted third-party service providers who assist us in running our business, including:
​
Cloud storage, hosting, and web development platforms.
​
Project management tools and Customer Relationship Management (CRM) software.
Professional accounting software and payment gateways.
​
Google LLC: For the provisioning of web analytics (GA4) and digital advertising tools (Google Ads).
All such third parties are contractually bound to maintain strict confidentiality and deploy data security measures equivalent to our own.
​
6. International Data Transfers
Because we collaborate with global clients and utilise secure, industry-leading cloud storage and service platforms (including Google’s global infrastructure), your personal information may be transferred across borders.
​
When data is transferred outside of South Africa, we ensure that the recipient country has data protection laws offering an adequate level of protection substantially similar to POPIA, or that the transfer is governed by binding corporate rules or standard data protection clauses that safeguard your rights.
​
7. Data Security
We implement appropriate technical and organisational measures to secure the integrity and confidentiality of your personal information. These steps are designed to prevent accidental loss, unauthorised access, destruction, misuse, or alteration of data. While we strive to protect your data using industry-standard protocols, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
​
8. Data Retention
We retain personal information only for as long as is strictly necessary to:
Fulfil the purposes for which it was collected (such as active project management).
Comply with legal, tax, or accounting regulations (for instance, South African company law requires financial records to be kept for seven years).
​
Defend or bring potential legal claims.
​
Once personal information is no longer required, it is securely destroyed, deleted, or permanently de-identified.
​
9. Your Data Subject Rights
Under POPIA (and supported by GDPR principles where applicable), you possess specific rights regarding your personal information, including the right to:
​
-
Access: Request confirmation of whether we hold your personal information and obtain a copy of that record.
-
Correction: Request that we rectify, update, or complete any inaccurate or misleading personal data.
-
Objection: Object to the processing of your data on reasonable grounds, unless processing is required by law.
-
Deletion: Request that we delete or destroy your personal information where we are no longer authorised to retain it.
-
To exercise any of these rights, please contact our Information Officer using the details provided below.
​
10. Information Officer Contact Details
If you have any questions about this Privacy Policy, wish to update your preferences, or want to file a request regarding your data rights, please contact our designated Information Officer:
​
Information Officer: Riaan le Roux
Company Name: RlR Design (Pty) Ltd
Contact: Please contact us either through our get in touch page or through WhatsApp
​
If you feel that your data protection rights have been infringed, you have the right to lodge a complaint with the South African Information Regulator:
​
Website: https://inforegulator.org.za/