Privacy Policy
Last updated: 7 October 2026
Version 2026-10-07. This policy explains how Tshiamo Malahleha (trading as NAAI Creative) handles your personal information, in line with South Africa’s Protection of Personal Information Act (POPIA) and applicable Lesotho law.
Who this site is for
This website is for businesses and adults. We don’t knowingly collect information from anyone under 18. If you think a child has sent us details, contact us and we’ll delete them.
What we collect
- Form details: your name, email, phone number (optional), business type (optional), the service you’re interested in, your message and your answers to our quick questions.
- Consent records: when you submitted the form, which form and page you used, which boxes you ticked, and which version of this policy applied.
- Cookies and similar storage: essential storage to remember your cookie choice. Analytics and marketing tools (such as a Meta pixel) only run if you opt in. See our Cookie Policy.
Why we use it, and our legal basis
- To reply to your enquiry and prepare a proposal — based on your consent and on steps you asked us to take before a possible contract.
- To send marketing emails or messages — only if you ticked the separate marketing box. You can withdraw at any time.
- To keep records proving consent and to protect our site from spam — our legitimate interest and legal obligations.
Who we share it with
We don’t sell your information. We share it only with service providers (operators) who help us run the business, under written agreements to keep it secure: website hosting and database, customer relationship (CRM) tools, email tools and automation tools. [List provider names.]
Storage outside South Africa / Lesotho
Some of these providers store data on servers outside South Africa and Lesotho. We only use providers bound by laws, binding agreements or rules that give a level of protection similar to POPIA, as section 72 of POPIA requires.
How long we keep it
Enquiries that don’t become clients are deleted within 12 months of our last contact. Client records are kept for as long as the law requires (usually 5 years for financial records). Consent records are kept for as long as we rely on that consent, plus 12 months.
How we protect it
Data is sent over encrypted connections (HTTPS), stored in an access-controlled database, and only the business owner can view enquiries.
Your rights
You can ask to see, correct or delete your information, object to processing, or withdraw consent. Use our data request form or email us at joinnaai@gmail.com. We respond within a reasonable time.
How to reach us
joinnaai@gmail.com · +27 78 882 4715
Complaints
If you’re unhappy with how we handled your information, please tell us first. You also have the right to complain to the Information Regulator (South Africa): complaints.IR@justice.gov.za.
Changes
We’ll update the date and version above whenever this policy changes.