Privacy Policy
How Tsoga Labs collects, uses, and protects your personal information
Last updated: July 2026
What This Policy Means For You
At Tsoga Labs (Pty) Ltd (“Tsoga Labs”, “we”, “our”, or “us”), we value your privacy and are committed to protecting your personal information. We collect only the information necessary to communicate with you, deliver our services, improve your experience, and comply with applicable laws.
We do not sell your personal information to third parties. We process your information responsibly, transparently, and in accordance with the Protection of Personal Information Act, 4 of 2013 (POPIA).
You have the right to access, correct, object to, or request the deletion of your personal information where applicable by law.
If you have any questions regarding this Privacy Policy, please contact us using the details provided at the end of this document.
1. Introduction
This Privacy Policy explains how Tsoga Labs collects, uses, stores, protects, and discloses personal information when you:
- Visit our website;
- Contact us;
- Request a quotation or consultation;
- Engage our services;
- Subscribe to our communications; or
- Interact with us through any digital platform.
By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.
2. Who We Are
Tsoga Labs is a South African digital growth agency that partners with businesses to build sustainable digital systems that generate measurable growth.
Our services include, but are not limited to:
- Performance Marketing
- Website Design & Development
- Landing Pages
- Lead Generation Systems
- CRM Implementation & Management
- Lead Tracking & Reporting
- Search Engine Optimisation (SEO)
- Answer Engine Optimisation (AEO)
- Marketing Analytics & Reporting
- Digital Strategy & Consulting
- Other digital services offered from time to time
Business Information
- Company Name – Tsoga Labs (Pty) Ltd
- Address – Remote
- Email – info@tsogalabs.co.za
- Telephone – To be updated
3. Information We Collect
Depending on how you interact with us, we may collect the following information:
Personal Information
- Full name
- Email address
- Telephone number
- Company name
- Job title
- Physical address (where necessary)
Business Information
Where you enquire about our services, we may collect information such as:
- Business industry
- Company size
- Marketing objectives
- Existing digital platforms
- Business challenges
- Project requirements
- Budget information
Website & Technical Information
When you visit our website, certain information may be collected automatically, including:
- IP address
- Browser type
- Device type
- Operating system
- Pages viewed
- Time spent on pages
- Referral sources
- Website usage statistics
Communications
We may retain records of communications including:
- Emails
- Contact forms
- Telephone calls
- WhatsApp messages
- Meeting notes
- Customer support enquiries
Service Information
Where we provide services, we may process information necessary to perform our contractual obligations, including:
- Website access credentials
- CRM configuration
- Advertising platform access
- Analytics information
- Campaign performance data
- Lead information
- Website content
- Digital marketing reports
This information is accessed only where necessary to deliver our services and is handled with strict confidentiality.
4. How We Use Your Information
We use your personal information to:
- Respond to enquiries;
- Prepare quotations and proposals;
- Deliver contracted services;
- Build and manage websites;
- Configure CRM systems;
- Manage advertising campaigns;
- Generate reports and analytics;
- Improve our services;
- Provide customer support;
- Communicate regarding projects;
- Send invoices and service-related communications;
- Send marketing communications where you have consented;
- Detect fraud and maintain security;
- Comply with legal and regulatory obligations.
5. Legal Basis for Processing
We process personal information in accordance with POPIA.
Our lawful bases for processing include:
- Your consent;
- Performance of a contract;
- Compliance with legal obligations;
- Legitimate business interests, provided your rights are not overridden.
6. Client Data and Account Ownership
Many of our services require access to digital platforms owned by our clients, including websites, CRM systems, advertising accounts, analytics platforms, social media accounts, and other online services.
Unless otherwise agreed in writing:
- Ownership of client accounts, customer data, advertising accounts, and digital assets remains with the client.
- Tsoga Labs accesses and processes this information solely for the purpose of delivering contracted services.
- We do not claim ownership of client data.
- Access is limited to authorised personnel and trusted contractors where necessary.
7. Confidential Information
During consultations and throughout our business relationship, clients may share confidential commercial, technical, strategic, or operational information.
Tsoga Labs treats such information as confidential and uses it only for the purposes of providing agreed services unless:
- disclosure is authorised by the client;
- disclosure is required by law; or
- disclosure is necessary to protect our legal rights.
8. Sharing Your Information
We respect your privacy and do not sell, rent, or trade your personal information.
We may share information only where necessary with trusted third parties, including:
- Website hosting providers;
- Cloud storage providers;
- CRM providers;
- Email communication platforms;
- Analytics providers;
- Payment processors;
- Advertising platforms;
- Professional advisers;
- Government or regulatory authorities where legally required.
These providers are contractually or legally required to protect your information.
9. International Transfers
Some technology platforms used by Tsoga Labs may process or store information outside South Africa.
These platforms may include:
- Microsoft 365
- Google Workspace
- Google Analytics
- Google Ads
- Meta Business Suite
- HubSpot
- Other reputable cloud-based service providers
Where cross-border transfers occur, we take reasonable steps to ensure appropriate safeguards exist in accordance with Section 72 of POPIA.
10. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to:
- Improve website performance;
- Analyse visitor behaviour;
- Measure marketing effectiveness;
- Remember user preferences; and
- Improve the overall user experience.
We may use services including:
- Google Analytics
- Google Tag Manager
- Meta Pixel
- Microsoft Clarity (where implemented)
- Other analytics and marketing tools
You may disable cookies through your browser settings, although some website functionality may be affected.
11. Contact Forms
Information submitted through our website forms is used to:
- Respond to enquiries;
- Schedule consultations;
- Prepare quotations;
- Deliver requested services;
- Improve customer service.
We will not use your information for unrelated purposes without your consent where required by law.
12. Marketing Communications
Where permitted by law, we may send newsletters, industry insights, company updates, or promotional information relating to our services.
You may unsubscribe at any time by:
- clicking the unsubscribe link in our emails; or
- contacting us directly.
13. Artificial Intelligence (AI) and Automation
To improve efficiency and service delivery, Tsoga Labs may use reputable AI-assisted and automated technologies to support activities such as content creation, campaign optimisation, reporting, analytics, workflow automation, and customer support.
Where these tools process personal information, we implement reasonable safeguards and work with trusted providers that maintain appropriate security and privacy standards.
Human oversight remains an important part of our service delivery.
14. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected or as required by law.
Typical retention periods include:
- Contact enquiries — up to 3 years
- Client project information — for the duration of the business relationship plus 5 years
- Financial and accounting records — as required by applicable legislation
- Marketing information — until consent is withdrawn or the information is no longer required
When information is no longer required, it is securely deleted or anonymised where appropriate.
15. Security
We implement appropriate technical and organisational measures to protect personal information, including:
- SSL/TLS encrypted connections
- Secure cloud infrastructure
- Password-protected systems
- Role-based access controls
- Multi-factor authentication where applicable
- Regular software updates
- Secure backups
- Security monitoring and vulnerability management
While we take reasonable precautions, no method of internet transmission or electronic storage can be guaranteed to be completely secure.
Should a security incident occur that is likely to compromise your personal information, we will respond in accordance with POPIA, including notifying the Information Regulator and affected individuals where legally required.
16. Your Rights Under POPIA
You have the right to:
- Request access to your personal information;
- Request correction of inaccurate or incomplete information;
- Request deletion of information where legally permitted;
- Withdraw consent where processing relies on consent;
- Object to certain processing activities;
- Request restriction of processing where applicable;
- Lodge a complaint with the Information Regulator.
To exercise any of these rights, please contact us using the details below.
17. Information Regulator (South Africa)
If you believe your personal information has not been handled appropriately, you may contact:
Information Regulator (South Africa)
Website: https://www.inforegulator.org.za/
18. Children's Privacy
Our website and services are intended primarily for businesses and individuals aged 18 years and older.
We do not knowingly collect personal information from children without appropriate legal consent. If we become aware that such information has been collected unintentionally, we will take reasonable steps to delete it.
19. Automated Decision-Making
Tsoga Labs does not make decisions that produce legal or similarly significant effects solely through automated processing of personal information.
20. Third-Party Websites and Services
Our website may contain links to third-party websites or integrate services provided by third parties, including scheduling tools, maps, videos, payment providers, social media platforms, or embedded content.
These third parties operate under their own privacy policies, and Tsoga Labs is not responsible for their privacy practices.
We encourage you to review the privacy policies of any third-party services you use.
21. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legislation, technology, or our business operations.
The latest version will always be available on our website, and the “Last Updated” date will indicate when changes were made.
21. Contact Us
If you have any questions about this Privacy Policy or how your personal information is processed, please contact our Information Officer.
Information Officer
Tsoga Labs (Pty) Ltd
Email: info@tsogalabs.co.za
Telephone: *Will be updated*
Business Address: Remote