What this site collects, and why.

Capreo Digital is the responsible party for the information described here, in the sense the Protection of Personal Information Act uses that phrase. Questions, corrections and deletion requests all go to the same address, at the foot of this page, and are handled by a person rather than a queue.

Until you answer the banner at the foot of the screen, nothing on this site stores a cookie for measurement. Google Analytics still records that a page was viewed, but it does so without an identifier — it cannot tell that two page views were the same person, and it cannot recognise you on a later visit. That is Google Consent Mode running in its denied state, and it is the default here for everyone.

Accept, and two things change:

• Google Analytics 4 sets its own cookies so a visit holds together as one session, and so a return visit is recognisable as a return. It records pages viewed, taps on the buttons that ask you to do something, and whether a form was started or finished. It does not receive your name, your email address or anything you type into a form.
• HubSpot, our CRM, sets cookies that link the pages you read to the enquiry you eventually send, if you send one. This is what lets us tell that the person who wrote in on Thursday had read three of our notes first.

Decline and none of these cookies is set, the HubSpot script is never loaded at all, and the site works exactly as it does otherwise. The answer is remembered in your own browser and you are not asked again.

One thing is recorded either way, and it is worth being straight about: the page you arrived on and where you came from — a search engine, a link on LinkedIn, one of our own messages — are kept in your browser's own storage for ninety days. That never leaves your device unless you send us a form, in which case it is attached to the enquiry so we know which piece of work found you. It carries no identifier and it is not shared with anyone.

Booking a call or sending an enquiry stores what you filled in: your name, email address, phone number and company where you gave them, what the enquiry is about, and your message. It is kept in our own database, a copy goes to our CRM so that an enquiry cannot quietly go unanswered, and a notification reaches us by email. You get a confirmation at the address you gave.

Your IP address is not stored. It is converted to a one-way hash with a secret key the moment it arrives, and the hash exists for a single purpose: noticing when one machine is filling the diary. It cannot be turned back into an address, and it is useless to anyone who does not hold that key.

• Convex — the database that holds bookings and enquiries.
• HubSpot — the CRM copy of the same records, hosted in the EU.
• Resend — sends the notification and your copy of it.
• Vercel — serves this site and keeps ordinary server logs.

Google Analytics is added to that list only if you accept measurement. Some of these process information outside South Africa, which POPIA permits where the receiving country offers comparable protection or the processor is bound by contract to it. Nobody on this list is sold anything, and nobody on it receives your information for their own marketing.

Bookings and enquiries are kept for as long as the relationship is live and for three years afterwards, which is the window in which a past client is likely to come back and expect us to remember the work. Analytics data is kept for fourteen months, the longest Google Analytics allows. The arrival record in your browser expires after ninety days, and clearing your browser data removes it immediately along with the consent answer.

Under POPIA you may ask what we hold about you, have it corrected, have it deleted, or object to us holding it at all. Write to hello@capreodigital.co.za and it is done — there is no form to complete and no reason we would argue about it. If you are not satisfied with how we handle it, the Information Regulator of South Africa takes complaints directly.

To change your mind about measurement, clear this site's data in your browser settings. The banner returns on your next visit and whatever you answered before is gone.