Privacy Policy

Who we are

S40 Works is a trading brand of Studio 40 Solutions (Pty) Ltd, based in Cape Town, South Africa. This policy covers this website and the enquiries you send us through it.

What we collect

When you use the contact form or message us, we collect the details you choose to give us: your name, business name, email address, contact number, and anything you write in the optional requests box. We do not collect special personal information as defined in POPIA, and we do not knowingly collect information from children.

The site does not use advertising cookies, and we do not sell or share your information with advertisers.

How we use it

We use your details for one purpose: to respond to your enquiry, arrange a Lost Opportunity Review or Discovery Chat, and follow up about working together. We contact you by email, phone, SMS or WhatsApp using the details you provide.

How we measure the site

We use Microsoft Clarity to understand how the site is used — which pages people read, how far they scroll, and where they click something that does not work. This is how we find and fix problems like a button that is hard to tap on a phone.

We use it in aggregate: we look at patterns across all visitors, not at what any one person did. Session recordings are switched off, and anything you type into the contact form is hidden from us as you type it. Clarity does set one cookie so it can tell a returning visitor from a new one, and Microsoft records your IP address to work out roughly which country you are in. Under POPIA that counts as personal information — which is why we are telling you here.

Our lawful basis is our legitimate interest in keeping the site working properly for the people using it. If you would rather not be included, most browsers offer a Do Not Track setting, and browser privacy modes and tracker blockers will also prevent this measurement.

Our lawful basis under POPIA

We process your personal information under the Protection of Personal Information Act 4 of 2013 (POPIA). When you send us an enquiry, we process your details because it is necessary to respond to you and to take steps at your request before entering into an agreement.

Marketing is treated separately. We only send you marketing emails if you have specifically opted in by ticking the marketing box on our contact form. Replying to an enquiry you sent us is not marketing and does not require that consent. You can withdraw marketing consent at any time, and every marketing email carries an unsubscribe link.

Giving us your details is voluntary. If you choose not to, we simply will not be able to contact you about your enquiry.

Who we share it with

We do not sell your information. We share it only with the tools we need to run the business, and only as far as is necessary. Those are HubSpot, the customer-management system that stores your enquiry and sends your confirmation email; Microsoft Clarity, which measures how the site is used; and Vercel, which hosts the site.

Information sent outside South Africa

Our customer-management system, HubSpot, stores data on servers in the European Union. This means your personal information is transferred outside South Africa, as section 72 of POPIA allows where the receiving country's laws provide comparable protection. The European Union's data-protection regime meets that standard.

How we keep it safe

We use reputable providers with encryption in transit and at rest, access limited to the people who need it, and accounts protected by strong authentication. No system is perfect, but we take reasonable steps to guard against loss, unlawful access and misuse — and we will notify you and the Information Regulator if a breach affects your information.

How long we keep it

We keep enquiry details for as long as needed to help you and to keep sensible business records — ordinarily up to three years from our last contact with you, unless a longer period is required by law. You can ask us to delete your information sooner at any time.

Your rights

Under POPIA you may ask to see the information we hold about you, have it corrected or deleted, object to how we use it, or withdraw consent you previously gave. Email hello@s40works.co.za and we will action it. We will not charge you for a reasonable request.

Our Information Officer

Our Information Officer is responsible for how we handle personal information and for our compliance with POPIA. You can reach them at hello@s40works.co.za. Please raise any concern with us first — we would rather fix it directly.

Complaints to the Information Regulator

If you are not satisfied with how we have handled your information, you have the right to complain to the Information Regulator of South Africa. They can be contacted at complaints.IR@justice.gov.za, or through their website at inforegulator.org.za.

Changes

If this policy changes, we will update the date at the top of this page.