Privacy Policy

Last updated: 5 February 2026

Luma Digital Marketing (Pty) Ltd (“we”, “us”, or “our”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and protect your data in compliance with the Protection of Personal Information Act, 4 of 2013 (POPIA) and the General Data Protection Regulation (GDPR).

1. Who We Are and Information Officer

Luma Digital Marketing is a digital marketing agency based in South Africa. In terms of POPIA, we have appointed an Information Officer to oversee data privacy.

Company Name: Luma Digital Marketing (Pty) Ltd
Information Officer: Lara Husselmann
Email: lara@lumadigital.co.za
Website: https://lumadigital.co.za

2. Information We Collect

We collect personal information that is adequate, relevant, and limited to what is necessary for our business functions:

Contact Data: Name, surname, email address, and phone number.
Business Data: Company name and job title.
Technical Data: IP address, browser type, device information, and geographic location.
Marketing Data: Your preferences in receiving marketing from us and your communication preferences.

3. How We Collect Information

Direct Interactions: When you fill out contact forms or subscribe to our newsletter via MailerLite.
Automated Technologies: As you interact with our website, we use Google Analytics and the Meta Pixel to collect data via cookies and tracking signals.
Third Parties: We may receive data from advertising networks and analytics providers.

4. Lawful Basis for Processing

We process your data under the following legal frameworks:

Consent: For marketing communications and non-essential cookies.
Contract: To fulfill our service obligations to you.
Legitimate Interest: To improve our website performance and secure our systems.
Legal Obligation: Where we are required to retain records for tax or regulatory purposes.

5. Third-Party Tools & International Transfers

We use specialized service providers to run our business. Some of these providers are located outside of South Africa (e.g., USA and EU). We ensure they adhere to strict data protection standards.

Google Analytics: Tracks website traffic and user behavior.
Meta Pixel: Used for conversion tracking and "Retargeting" ads. This allows us to show you relevant ads on Facebook and Instagram based on your visit to our site.
MailerLite: Used for email marketing. We use a "Double Opt-In" process to ensure you genuinely wish to receive our content.

Cross-Border Transfers: By using our services, you acknowledge that your data may be transferred to and processed in countries where these providers maintain servers. We ensure that such transfers are protected by Standard Contractual Clauses (SCCs) or similar safeguards.

6. Cookies and Tracking

Our website uses cookies to distinguish you from other users.

Essential Cookies: Required for the website to function.
Marketing/Tracking Cookies: (e.g., Meta Pixel) These require your prior consent via our cookie banner. You can opt-out of personalized advertising at any time via Google Ad Settings or your Facebook Ad Preferences.

7. Data Retention

We do not keep your data longer than necessary:

Enquiries: Retained for 24 months from the last contact.
Client Records: Retained for 5 years as required by South African tax law.
Mailing List: Retained until you click "Unsubscribe."

8. Your Rights

Under POPIA and GDPR, you have the right to:

Access: Request a copy of the personal data we hold about you.
Correction: Ask us to update or fix inaccurate information.
Deletion: Request that we erase your personal data.
Objection: Object to our processing of your data for direct marketing.
Withdrawal: Withdraw your consent at any time.

To exercise these rights, please contact our Information Officer at lara@lumadigital.co.za.

9. Data Security

We implement technical and organizational security measures (including SSL encryption via Hostinger) to protect your data from unauthorized access or loss. In the event of a suspected data breach, we will notify you and the Information Regulator as required by law.

Information Regulator (South Africa):

Email: enquiries@inforegulator.org.za
Website: https://inforegulator.org.za/

10. Changes to This Policy

We may update this policy periodically. The "Last Updated" date at the top will indicate when the latest changes were made.