Privacy Policy

This policy explains how we process personal information when you use this website or order a design service, in line with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Who is responsible for your information

The responsible party (data controller) for personal information collected through this website is:

• Trading name: Vyro Creative
• Legal entity: [to be confirmed by the business owner]
• Registration number: [to be confirmed by the business owner]
• Physical address: 7 Clayton Street, Centurion, Gauteng 0157, South Africa
• Information Officer: [to be confirmed by the business owner]
• Contact: studio@vyrocreative.online · +27 83 895 9898

2. What we collect

• Identity and contact details: your name, email address and optional business name.
• Order details: the service chosen, your project brief, preferred deadline, files or links you send us, and your order reference.
• Consent records: when you accepted our terms, which policy version applied, and whether you asked us to start work early.
• Payment information: payment status, amount and reference. Card details are entered on Paystack's pages and are not received or stored by us.
• Technical information: basic logs (such as IP address and browser type) created by our hosting provider for security and reliability.

3. Why we use it (purposes and lawful basis)

• To perform our contract with you: deliver your design, communicate about your order and handle revisions, cancellations and refunds.
• To comply with legal obligations: tax, accounting and consumer-protection records.
• For our legitimate interests: preventing fraud, securing the website and resolving disputes.
• With your consent: for example, showing your finished work in our portfolio. You can withdraw consent at any time.

We do not sell personal information and we do not send marketing messages without your consent.

4. Service providers (operators)

We share information only with providers that help us run the service, under written terms requiring them to keep it secure:

• Paystack — payment processing.
• Our website hosting and database providers — storing order records and running the website.
• Our email provider — sending order communications.

We may also disclose information where required by law or to protect our legal rights.

5. International transfers

Some of our service providers may store or process information on servers outside South Africa. Where this happens, we rely on the conditions in section 72 of POPIA — for example, that the recipient is bound by laws, binding rules or an agreement giving a comparable level of protection, or that the transfer is necessary to perform our contract with you.

6. How long we keep it

• Order, payment and consent records: for as long as required by tax and accounting law (generally up to 5 years after the order).
• Project files and briefs: about 6 months after final delivery, unless you ask us to delete them sooner.
• Information is deleted or de-identified once it is no longer needed.

7. Security

We use reasonable technical and organisational measures, including encrypted connections (HTTPS), restricted access to order records and reputable service providers. No system is completely secure; if a security compromise affects your information, we will notify you and the Information Regulator as required by POPIA.

8. Your rights

Under POPIA you may:

• ask whether we hold your information and request a copy;
• ask us to correct, update or delete it;
• object to processing based on our legitimate interests, or withdraw consent;
• object to direct marketing; and
• lodge a complaint with the Information Regulator.

Email studio@vyrocreative.online to make a request. We may need to verify your identity first.

9. Complaints

Please contact us first so we can try to help. You may also complain to the Information Regulator (South Africa): website inforegulator.org.za, email POPIAComplaints@inforegulator.org.za.

10. Changes

We may update this policy. The version number above shows the current version.