PRIVACY POLICY

We collect personal information directly when you submit contact forms, request diagnostic audits, or subscribe to communications:

• Contact & Inquiry Data: Full name, work email address, telephone number, selected service requirements, and project briefs.
• Diagnostic Audit Data: Submitted domain URLs, performance scores, and technical audit metrics generated via our SEO & AEO diagnostic tool.
• Marketing & Subscription Data: Email addresses and opt-in timestamps for newsletter updates and technical insights managed via Brevo.
• Device & Traffic Data: Anonymized IP addresses, browser types, operating systems, referrer URLs, and interaction event logs.
• Consent State: Browser local storage flags (cookieConsent) recording your privacy preferences.

We process your data strictly for specified operational purposes:

• To evaluate project briefs and deliver custom design proposals.
• To run diagnostic audits and generate site performance reports.
• To send transactional notifications, email updates, and marketing communications via Brevo (with opt-out controls).
• To measure web performance, conversion metrics, and advertising effectiveness via Google Analytics, Google Tag Manager, and Google Ads.
• To protect our infrastructure against security threats, automated spam, and cyber attacks.
• To fulfill legal, accounting, and regulatory compliance duties.

We do not sell, rent, or trade your personal information to data brokers.

We share data with trusted third-party processors operating under strict confidentiality and security agreements:

Our site uses cookies, tags, and local storage to personalize content and analyze traffic. You have full control over marketing communications and tracking:

• Direct Marketing Opt-Out: Every email sent via Brevo includes an instant unsubscribe link. You may also contact us to update your subscription preferences.
• Google Ad Settings: You can customize or turn off personalized ads via Google Ad Settings.
• Browser Controls: Adjust your browser settings to reject cookies or clear local storage flags.

Because we use global cloud infrastructure (Firebase, Google Cloud, Brevo servers), your information may be transferred across international borders. We ensure all cross-border transfers comply with POPIA Section 72 and GDPR Chapter V by using binding standard contractual clauses and encrypted cloud storage.

We retain client inquiry records for up to 24 months for administrative purposes or until you request deletion. We enforce technical safeguards including TLS 1.3 encryption, Content Security Policies, NPM dependency security quarantines, and isolated database permissions.

You hold the following rights regarding your personal data:

• Access: Request confirmation and details of personal records held by us.
• Correction: Request correction or updating of inaccurate personal data.
• Erasure: Request deletion of your personal information ("Right to be Forgotten").
• Objection: Object to processing for direct marketing or legitimate interest grounds.

To exercise your rights, contact our Information Officer at info@dozdesigns.online.