Privacy policy.

1. Who we are

This privacy policy explains how Magoven Creative Studio (Pty) Ltd (registration number 2020/187776/07), trading as Magoven.io (“Magoven”, “we”, “us”), handles personal information. We are the responsible party under South Africa’s Protection of Personal Information Act 4 of 2013 (POPIA).

Address: 5820 Hillside Avenue, Woodhill Estate, Polokwane, 0699, South Africa. Email: [email protected]. Telephone: +27 82 639 0925.

Questions about this policy, and requests about your personal information, go to our Information Officer at [email protected].

2. What this policy covers

This policy applies to magoven.io, including our blog at magoven.io/blog, to the contact and start-project forms, and to enquiries you send us by email, telephone or WhatsApp.

When we build or run a website, system or AI service for a client, the personal information of that client’s own customers belongs to the client. In that work we act as the client’s operator, under our agreement with them and their privacy policy.

3. Personal information we collect

Information you give us:

• When you use our contact or start-project form: your name, email address and, if you add them, your phone number, business name, current website, budget, timing, the service or package you are interested in, and your message.
• When you email, call or WhatsApp us: your contact details and whatever you choose to tell us.
• When you become a client: the contact and billing details of the people we work with, and the project information you share with us.

Information collected automatically:

• Our web server records each request: IP address, browser and device type, the page requested, the referring page and the date and time.
• Cloudflare, which sits in front of our website, processes the same request data to deliver the site and protect it from attacks.
• Our blog uses Google Analytics to measure visits. The rest of magoven.io does not use analytics or advertising trackers. See our cookie policy.

Please don’t send us passwords, identity numbers, bank details or health information through the forms. We don’t need them to reply to an enquiry.

4. Why we use it

We use personal information only for these purposes, and on these grounds in section 11 of POPIA:

• To reply to your enquiry and prepare a quotation, because you asked us to (steps needed to conclude a contract with you).
• To deliver, invoice and support the work you hire us for (performance of our contract).
• To keep our website and systems secure and to stop spam and abuse (our legitimate interest).
• To keep accounting and tax records (a legal obligation).

We don’t send marketing messages unless you have agreed to receive them, and every marketing message lets you opt out. We don’t sell personal information.

5. What if you don’t provide us with your personal information?

If you don’t provide us with your personal information, we may not be able to provide you with the information, products or assistance that you are seeking.

6. Operators we share information with

We only share personal information with operators that process it for us, and only for the purpose listed:

• Input Output Flood LLC (IOFLOOD), United States: hosts the server that runs our website, receives form submissions and holds our email.
• Cloudflare, Inc., United States, with a global network: delivers our website and protects it from attacks.
• Google LLC: Google Analytics on our blog. We have concluded a data processing agreement with Google. Google may not use the data for any other Google services.
• WhatsApp (Meta Platforms): only if you choose to contact us on WhatsApp, under WhatsApp’s own terms and privacy policy.

We may also share information with our professional advisers, such as our accountants or attorneys, where they need it to advise us, and with authorities when the law requires it.

7. Information sent outside South Africa

Our server is hosted in the United States, and Cloudflare and Google process data in several countries. When you use our website or forms, your personal information is therefore transferred outside South Africa.

We make these transfers only as section 72 of POPIA allows, for example where the transfer is needed to respond to your request or to perform our contract with you, or with your consent.

8. Cookies

Our cookie policy explains which cookies are used on magoven.io and how to control them: read the cookie policy.

9. How long we keep it

• Enquiries that don’t become projects: deleted within 12 months of our last contact with you.
• Client records, invoices and correspondence: kept for five years after the end of the tax year they relate to, as the Tax Administration Act requires.
• Web server logs: kept for 14 days, then deleted automatically.

We keep information longer only when the law requires it or you ask us to.

10. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

The security measures we use include:

• Encrypted connections (HTTPS) on every page and form.
• Cloudflare protection in front of the website.
• Automatic blocking of repeated failed sign-in attempts on our server.
• Form submissions are emailed to our team and are not stored in a website database.
• Access to our server and mailboxes is limited to the people who need it and protected by username and password.

If we believe your personal information has been accessed by an unauthorised person, we will tell you and the Information Regulator as soon as reasonably possible, as section 22 of POPIA requires.

11. Your rights

Under POPIA you may:

• ask whether we hold personal information about you, and for a copy of it;
• ask us to correct, update or delete it;
• object to us using it, including for direct marketing;
• withdraw your consent where we rely on it;
• complain to the Information Regulator (section 15).

Send requests to [email protected]. We may ask you to confirm your identity first. We reply within a reasonable time, and no later than 30 days.

12. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website.

We cannot guarantee that these third parties handle your personal data in a reliable or secure manner.

We recommend you read the privacy statements of these websites prior to making use of these websites.

13. Children

Our website is not designed to attract children and it is not our intent to collect personal data from children under the age of consent in their country of residence.

We therefore request that children under the age of consent do not submit any personal data to us.

14. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement.

It is recommended that you consult this privacy statement regularly in order to be aware of any changes.

In addition, we will actively inform you wherever possible.

Last updated: 22 October 2026.

15. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, please contact us first at [email protected] so we can try to put it right.

You also have the right to submit a complaint to the Information Regulator (South Africa), Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191. Complaints email: [email protected]. Telephone: 010 023 5200. Website: inforegulator.org.za.

16. Contact details

Magoven Creative Studio (Pty) Ltd
5820 Hillside Avenue, Woodhill Estate, Polokwane, 0699, South Africa
Website: https://magoven.io
Email: [email protected]
Telephone: +27 82 639 0925