Privacy Policy
Effective date: 1 April 2026 | Last updated: 1 April 2026
Who this policy applies to
This Privacy Policy applies to all visitors to fishercreative.co.za, all clients and prospective clients of Fisher Creative & Design, and anyone who contacts us via our website, email, or social media channels.
Fisher Creative & Design is a trading name of The Fisher Agency Pty (Ltd), registered in South Africa (Reg: 2015/313607/07), based in Cape Town, South Africa.
- Introduction
Fisher Creative & Design (“we”, “us”, “our”) is committed to protecting your personal information and to processing it responsibly and in accordance with applicable data protection law.
This policy explains what personal information we collect, why we collect it, how we use it, how we protect it, and what your rights are in relation to it.
We comply with:
— The Protection of Personal Information Act 4 of 2013 (POPIA) — applicable to all individuals in South Africa
— The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 — applicable to individuals in the United Kingdom
Where we refer to “personal information” in this policy, we mean any information that identifies or could identify you as an individual, as defined under POPIA and the UK GDPR.
- Who We Are and How to Contact Us
Data Responsible Party (SA) / Data Controller (UK)
The Fisher Agency Pty (Ltd), trading as Fisher Creative & Design
8-10 6th Avenue, Melkbosstrand, Cape Town, 7441, South Africa
Email: hello@fishercreative.co.za
Tel: +27 83 251 8298
For any privacy-related queries, requests, or complaints, please contact us at hello@fishercreative.co.za with the subject line “Privacy Request”.
UK representatives: As a South African company processing data of UK individuals, we are subject to UK GDPR obligations. UK-based individuals may also contact the Information Commissioner’s Office (ICO) at ico.org.uk.
- What Personal Information We Collect
Information you provide to us
— Name and contact details (email address, phone number, company name)
— Information submitted via our contact form or enquiry forms
— Project briefs, creative assets, and materials you share with us
— Payment and billing information (processed securely via third-party payment providers)
— Communications with us via email, WhatsApp, phone, or video call
Information we collect automatically
— Browser type, device type, and operating system
— Pages visited, time spent on pages, and referring URLs (via website analytics)
— IP address and approximate geographic location
Information from third parties
— Information from social media platforms (LinkedIn, Facebook) if you contact us or interact with our content
— Publicly available business information when we research prospective clients
- Why We Collect and How We Use Your Information
We process personal information only where we have a lawful basis to do so. Under POPIA, our lawful bases are legitimate interest, contractual necessity, and consent. Under UK GDPR, these correspond to Article 6(1)(b), (f), and (a).
| Purpose | Lawful basis (POPIA) | Lawful basis (UK GDPR) |
|---|---|---|
| Responding to enquiries and providing quotes | Legitimate interest / Contract | Art. 6(1)(b)(f) |
| Delivering design services to clients | Contract | Art. 6(1)(b) |
| Sending invoices and processing payments | Contract / Legal obligation | Art. 6(1)(b)(c) |
| Sending project updates and communications | Contract / Legitimate interest | Art. 6(1)(b)(f) |
| Website analytics and improving our services | Legitimate interest | Art. 6(1)(f) |
| Marketing and business development outreach | Legitimate interest / Consent | Art. 6(1)(f)(a) |
| Complying with legal obligations | Legal obligation | Art. 6(1)(c) |
- Marketing Communications
We may contact prospective clients by email or LinkedIn with information about our services where we have a legitimate interest in doing so and where we believe the contact is relevant to your business.
You may opt out of any marketing communications at any time by replying “unsubscribe” to any email or by contacting us at hello@fishercreative.co.za.
UK individuals: You have the right to object to direct marketing at any time under UK GDPR Article 21. We will always honour such requests without delay.
- How We Share Your Information
We do not sell, rent, or trade your personal information to third parties.
We may share personal information with:
— Service providers who assist in delivering our services (e.g. cloud storage, project management tools, email platforms) — all subject to appropriate data processing agreements
— Payment processors (e.g. banking partners) — for billing purposes only
— Freelance designers or specialist partners engaged on specific projects — only information necessary to complete the project
— Professional advisers (lawyers, accountants) — where legally required
— Regulatory or law enforcement authorities — where required by law
All third parties are required to handle your personal information securely and in accordance with applicable law.
- International Data Transfers
Fisher Creative & Design is based in South Africa. If you are located in the United Kingdom, your personal information is transferred to South Africa for processing.
South Africa has not yet received an adequacy decision from the UK Government. We therefore rely on Standard Contractual Clauses (SCCs) or other appropriate safeguards when transferring data from the UK to South Africa, in accordance with UK GDPR Article 46.
By engaging with us, UK-based individuals acknowledge that their data may be processed in South Africa, subject to these safeguards.
- How Long We Keep Your Information
— Client project files and communications: 5 years after project completion
— Financial and billing records: 7 years (as required by South African tax law)
— Enquiry records (non-clients): 2 years
— Marketing contact records: until you opt out or object, then deleted within 30 days
— Website analytics data: aggregated and anonymised after 26 months
We review retention periods regularly and securely delete or anonymise information when it is no longer needed.
- Your Rights
Under POPIA (South African individuals)
You have the right to:
— Access the personal information we hold about you
— Request correction of inaccurate or incomplete information
— Request deletion of your information (subject to lawful exceptions)
— Object to the processing of your information
— Lodge a complaint with the Information Regulator of South Africa
Information Regulator: inforegulator.org.za | complaints.IR@justice.gov.za
Under UK GDPR (UK individuals)
You have the right to:
— Access your personal data (Subject Access Request)
— Rectification of inaccurate data
— Erasure (the right to be forgotten)
— Restriction of processing
— Data portability
— Object to processing, including direct marketing
— Not be subject to solely automated decision-making
UK Information Commissioner’s Office (ICO): ico.org.uk | 0303 123 1113
To exercise any of these rights, contact us at hello@fishercreative.co.za. We will respond within 30 days (SA) or one calendar month (UK).
- Cookies
Our website may use cookies and similar tracking technologies to improve user experience and analyse site traffic. A cookie is a small file placed on your device when you visit a website.
We use:
— Essential cookies — necessary for the website to function
— Analytics cookies — to understand how visitors use our site (e.g. Google Analytics)
You can control or disable cookies through your browser settings. Disabling cookies may affect the functionality of the website.
- Security
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, or disclosure. These include secure email, access controls, and encrypted file storage.
No method of transmission over the internet is completely secure. We cannot guarantee absolute security but we are committed to protecting your information to the best of our ability.
- Children’s Privacy
Our services are not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.
- Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on our website with the revised effective date. Where changes are material, we will notify active clients directly.
Your continued use of our website or services after any update constitutes acceptance of the revised policy.