Privacy Policy

Last updated · 7 October 2026

Dreamers Media and Marketing (Pty) Ltd, trading as Dreamers Media

We are a South African business and this policy is written to meet the Protection of Personal Information Act 4 of 2013 (“POPIA”). We have kept it plain so you can actually read it.

1. Who we are

  • Registered name: Dreamers Media and Marketing (Pty) Ltd
  • Trading as: Dreamers Media
  • Company registration number: 2025/134354/07
  • Registered address: 6 Ash Avenue, President Ridge, Randburg, Johannesburg, 2194
  • Email: [email protected]
  • Website: www.dreamersmedia.co.za

We are the “responsible party” for the information in this policy. That is the POPIA term for the business that decides what is collected and why.

2. Our Information Officer

Every South African business has an Information Officer. Ours is:

To see what we hold about you, correct it, delete it, or object to how we use it, write to that address.

3. What we collect

When you enquire or book a call with us:

  • your name, email address and phone number
  • your business’s name and website, if it has one
  • your answers to our enquiry questions, such as what your business does, how many people work in it, and whether you want a website, AI agents or both
  • the date and time of your call, and which advert or link brought you to us
  • what you tell us on the call

When you become a client:

  • your billing details and payment records. We never see or store your full card number.
  • your brand material, business information, goals, market and competitors
  • logins or access to your domain, hosting, website and other accounts, only where the work needs them
  • our messages, your feedback and notes from training sessions

When you visit our website:

  • cookies and advertising identifiers, including Google Analytics and the Meta pixel
  • basic technical information, such as your device, browser and IP address

We do not ask for health, religious or other special personal information. Please do not send it to us.

Businesses are protected too. POPIA protects an existing company as well as a living person. We treat your business’s details as personal information.

4. Where we get it

  • Directly from you. When you fill in a form, email or WhatsApp us, speak to us on a call, or complete onboarding.
  • From Meta lead forms. If you sent your details through one of our adverts on Facebook or Instagram, Meta passes them to us.
  • From your visit to our website. The technical and advertising information in section 3.

5. Why we collect it

We use your information for these purposes and no others:

  • to reply to your enquiry and prepare a quote
  • to schedule and confirm your call
  • to deliver the services you buy: your website, AI agents, training and support
  • to invoice you, take payment and keep tax records
  • to send you updates about your project
  • to tell existing clients about similar services, with an easy way to opt out
  • to measure our advertising and see how our website is used. See section 11.

We do not sell your information. We do not rent it. We do not pass it on to anyone for their own marketing.

6. Our lawful basis

POPIA section 11(1) lists the grounds on which information may be processed. We rely on:

  • s11(1)(b), a contract. Our main ground. You are asking for, or buying, a service from us.
  • s11(1)(c), a legal obligation. Tax law requires us to keep invoice and payment records.
  • s11(1)(f), legitimate interests. Speaking to businesses who asked to hear from us, keeping clients informed, and knowing which of our adverts work.
  • s11(1)(a), consent. For analytics and advertising cookies, and for marketing to people who are not clients. You may withdraw consent at any time.

7. Is giving us your information voluntary?

Yes. You choose whether to enquire, book or buy. Once you are a client, tax law requires us to keep your invoicing details.

8. What happens if you do not give it

Without your name, email address and phone number we cannot book a call or send a quote. Without billing details we cannot invoice you. There is no other consequence.

9. Who else sees your information

We use a small number of outside services to run our business. Each sees only what it needs to do its job.

  • Go High Level, for our website, forms and bookings. Technical records of your visit, what you type into our forms, and your booking details.
  • Calendly, for bookings, where we use it instead of Go High Level. Your name, contact details, answers and booking time.
  • Cloudflare, for website security and speed. Technical records of your visit, such as your IP address and the pages you load.
  • domains.co.za, for our domain, hosting and dreamersmedia.co.za mailboxes. Anything you email us at a dreamersmedia.co.za address, and anything we email you from one.
  • Google, for calendar, video calls, files and website analytics. Your name, contact details, call times and project files. Through Google Analytics, once you accept it, how you use our website.
  • Anthropic (Claude), the AI we use in our own work. Only what a task needs, on settings that keep your information out of AI training.
  • Meta (Facebook and Instagram), for measuring our adverts. Advertising identifiers through the Meta pixel, once you accept cookies, and anything you type into one of our lead forms.
  • PayFast, Bob Pay and Paystack, for card payments. Your name, contact details and payment details, when you pay through one of them. We never see or store your full card number.
  • Our accountant, for invoices and tax. Your billing details.
  • Contractors on your project. Only what they need, under a duty of confidentiality.

We do not share your information with anyone else. We do not sell or rent it to anyone.

10. Information sent outside South Africa

Go High Level, Calendly, Cloudflare, Google, Anthropic and Meta are run from the United States, so some of your information is processed there. domains.co.za is a South African provider.

POPIA section 72 allows information to leave South Africa only in defined cases. The main one for us is section 72(1)(a): the provider must be bound by a law, binding corporate rules or an agreement that protects your information to a comparable standard. Where a transfer is needed to deliver your service, section 72(1)(c) also applies.

Before we use a provider, we check the data protection terms on our account with it. If a provider cannot meet section 72, we stop using it for your information.

If you would rather your details did not go through a booking tool hosted abroad, email [email protected]. We will arrange your call by email or phone instead.

11. Cookies and tracking

We use a small number of cookies. Necessary cookies make the site work and remember your cookie choice. Google Analytics shows us which pages people visit so we can improve the site. The Meta pixel tells Meta when someone who saw one of our adverts visits the site or makes an enquiry. We use it to see which adverts work and to show our adverts to people likely to be interested. That may include people who have visited our site before.

Analytics and the pixel stay off until you accept them. Under POPIA, the identifiers they set count as personal information.

To stop it, decline cookies on our banner, block cookies in your browser, or change your ad preferences in your Facebook or Instagram settings. Our Cookie Policy has the detail.

12. How long we keep it

  • Enquiries that do not become projects: 24 months from our last contact.
  • People who asked us not to contact them: kept indefinitely, so we can honour the request.
  • Client project files and messages: 5 years after the project ends.
  • Invoices and payment records: 5 years, as tax law requires.
  • Your logins and passwords: deleted from our records at handover or when support ends.
  • Website and advertising records: as long as the provider keeps them under its standard settings.

After that we delete the information or remove anything that identifies you.

13. How we protect it

We keep your information in the systems named in section 9, not in loose local files. Access is limited to the people who need it. Our website uses an encrypted (https) connection. If your information is accessed by someone who should not have it, we tell you and the Information Regulator as POPIA requires.

14. Your rights

Under POPIA you may:

  • See what we hold about you. Ask and we will tell you.
  • Have it corrected or deleted if it is wrong, out of date or no longer needed. The formal route is Form 2 under the POPIA Regulations, but an email is enough.
  • Object to how we use it where we rely on legitimate interests. The formal route is Form 1; again, an email is enough.
  • Withdraw your consent at any time. It is not backdated, but we stop from that point.
  • Tell us to stop contacting you. We keep a list and check it before we make contact.
  • Complain to us (section 15) or to the Information Regulator (section 16).

Write to [email protected]. We do not charge for any of this.

15. How to complain to us

Email [email protected] with what happened and what you would like us to do. We acknowledge you within 5 business days and answer within 30 days. If we need longer, we tell you why.

You do not have to come to us first. You may go straight to the Regulator.

16. How to complain to the Information Regulator

Information Regulator (South Africa)

  • Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191
  • Phone: 010 023 5200. Toll free: 0800 017 160
  • Complaints: through the Regulator's eServices portal, linked from inforegulator.org.za/complaints
  • General enquiries: [email protected]
  • Website: inforegulator.org.za

17. Changes to this policy

We publish any new version on this page and update the date at the top. If a change is significant, such as a new purpose, a new provider or a new country, we email the people whose information we still hold before it takes effect.

Not covered by this policy

What our clients do with their own customers’ information. When we build a client’s website or AI agents, that business decides what it collects from its customers and why, and its own privacy policy covers that. Information a client’s agents collect, and anything a client puts into its own AI subscription, is handled by that client and its providers. This policy covers only Dreamers Media’s own website, adverts, enquiries and client work.