Privacy Policy
Last updated: 25 April 2026
1. Who we are
Jashughatt Media Pty Ltd (“Jashughatt Media”, “we”, “us”, “our”) is a South African company operating as a Strategy, Sales and Marketing agency. This privacy policy explains how Jashughatt Media collects, uses, stores, and shares your personal information when you visit www.jashughatt.co.za, complete a form, take the AI Readiness Scorecard, book a call, purchase a service, or otherwise interact with us.
Contact: Jashughatt Media Pty Ltd Sandton, Johannesburg, South Africa Email: [email protected]
Jashughatt Media is the responsible party for the personal information processing described in this policy, as defined under the Protection of Personal Information Act, 2013 (POPIA).
2. The law that applies
This policy is written to comply with POPIA. Where this policy refers to your personal information, we mean any information that identifies or could identify you, as defined under POPIA. Where you visit our site from outside South Africa, additional laws may apply (GDPR for EU visitors, CCPA for California residents). Our practices below are designed to satisfy the highest applicable standard.
3. What information we collect
Information you give us directly
- Name, email address, phone number, company name, role, industry and revenue band when you complete a form, take the AI Readiness Scorecard, book a call, contact us, or purchase a service
- Information about your business needs, current marketing setup, AI maturity, and goals when you interact with our scorecard, audits, or other diagnostic tools
- Communications you send us via email, contact form, or messaging tools
- Payment information when you purchase a service (processed by third-party payment providers; we do not store card details)
Information we collect automatically
When you visit jashughatt.co.za:
- Device, browser, operating system, screen size, language preference
- IP address (truncated where possible)
- Pages visited, time on page, scroll depth, clicks, form interactions
- Referring source (where you came from, including UTM parameters from paid campaigns and emails)
- Cookies and similar technologies (see our Cookie Policy)
Information from third parties
We may receive information about you from:
- Lead enrichment tools using publicly available business information
- Advertising platforms (Google Ads, Meta, TikTok, LinkedIn) that report conversions and audience signals
- Referrals from clients or partners who have provided your details with your consent
4. Why we collect this information
We process your personal information for the following purposes:
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry, scorecard submission, or audit request | Consent and performance of a contract |
| Delivering services you have purchased (audit, sprint, retainer) | Performance of a contract |
| Sending you marketing communications about our services | Consent (which you can withdraw at any time) |
| Measuring and improving the performance of our website and marketing | Legitimate interest |
| Complying with legal, accounting, and regulatory obligations | Legal obligation |
| Defending or pursuing legal claims | Legitimate interest |
5. Who we share your information with
Jashughatt Media does not sell your personal information.
We share your information with the following categories of third parties, each bound by its own data-protection commitments:
- Service providers who help us run our business: HubSpot (CRM), Google (analytics, advertising, business productivity), Meta (advertising), TikTok (advertising), LinkedIn (advertising), Microsoft (analytics via Clarity), our email service provider, our calendar/booking provider, and the hosting provider for jashughatt.co.za
- Professional advisors such as accountants and lawyers, where necessary
- Regulators or law enforcement where we are legally required to disclose
A current list of our material third-party processors is available on request.
6. Cross-border transfers
Some of our service providers process personal information outside South Africa, including in the United States and European Union. We rely on the legal basis for cross-border transfer set out in Section 72 of POPIA, including provider compliance with GDPR or equivalent data-protection standards. Where applicable, we obtain your consent before such transfer occurs.
7. Cookies
We use cookies and similar technologies on our website. See our Cookie Policy for the full list and your control options. The first time you visit, our consent banner allows you to accept, reject, or configure cookie use. You can change your choices at any time via the “Cookie preferences” link in the footer.
8. How long we keep your information
We retain your personal information for as long as necessary to fulfil the purpose for which it was collected, or as required by law:
- Marketing leads (no engagement): 24 months from last interaction
- Active client records: duration of engagement plus 5 years (for tax, accounting and legal compliance)
- Closed-lost or unqualified leads: 12 months from last interaction
- Anonymous analytics data: 14 months in Google Analytics 4 (Google’s default), longer in aggregated form
- Financial records: as required by SA tax and accounting law (typically 5 years)
You can request earlier deletion subject to overriding legal obligations.
9. How we keep your information secure
We use reasonable technical and organisational measures to protect your personal information, including:
- HTTPS encryption for all website traffic
- Reputable third-party processors with documented security commitments (HubSpot, Google, Meta, etc.)
- Limited internal access to personal information on a need-to-know basis
- Regular review of access permissions and provider security posture
- Multi-factor authentication on admin accounts where available
No system is fully secure. If we become aware of a security breach affecting your personal information, we will notify you and the Information Regulator as required by POPIA.
10. Your rights under POPIA
You have the following rights regarding your personal information:
- Access: request a copy of the personal information we hold about you
- Correction: ask us to correct information that is inaccurate, irrelevant, excessive, out-of-date, incomplete, misleading, or unlawfully obtained
- Deletion: ask us to delete or destroy information we no longer need
- Objection: object to the processing of your personal information for direct marketing or where we rely on legitimate interest
- Consent withdrawal: withdraw your consent at any time
- Complaint: lodge a complaint with the Information Regulator if you believe we have processed your information unlawfully
To exercise any of these rights, email [email protected]. We will respond within a reasonable period and at most within 30 days. We may need to verify your identity before acting on your request.
11. The Information Regulator
If you are unhappy with how we have handled your personal information, you can contact the Information Regulator:
Information Regulator (South Africa) JD House, 27 Stiemens Street Braamfontein, Johannesburg, 2001 Email: [email protected] Website: https://inforegulator.org.za
12. Children
Our services are aimed at businesses, not individuals under 18. We do not knowingly collect personal information from children. If you believe we have, please contact us so we can delete it.
13. Direct marketing
We send marketing emails only to people who have opted in, including by submitting a form, taking the AI Readiness Scorecard, downloading a resource, or subscribing to our newsletter. Every marketing email contains a one-click unsubscribe link. If you opt out, we will stop sending marketing communications, though we may still send you transactional emails relating to a service you have purchased.
14. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top reflects the most recent change. Material changes will be notified to active clients via email; passive visitors should re-check the policy when material changes are flagged on the website.
15. Questions
If anything in this policy is unclear, or you would like to exercise any of your rights, email [email protected] and we will respond.