Privacy Policy

Draft for owner and legal review before publication

Effective date: 1 April 2026

1. About this policy

BEAM Creative Consulting (Pty) Ltd (“BEAM”, “we”, “us” or “our”) respects your privacy and handles personal information in accordance with applicable South African data-protection requirements, including the Protection of Personal Information Act, 2013 (“POPIA”).

This policy explains how we collect, use, disclose, retain and protect personal information when you visit our website, submit an enquiry or communicate with us about our services.

This website policy covers initial enquiries and ordinary website use. If BEAM is appointed to process personal information on a client’s instructions as part of an engagement, the parties may need additional privacy, security and data-processing terms appropriate to that engagement.

2. Who is responsible for your information?

The responsible party for the processing described in this policy is:

BEAM Creative Consulting (Pty) Ltd

Privacy contact / Information Officer: Paula Van Wyk, Information Officer

Email: paula@beamcreativeconsulting.com

Business address: To be confirmed before publication

3. Personal information we may collect

Depending on how you use the website, we may collect:

- your name and business contact details, such as your email address and optional telephone number;

- your organisation, role or authority to make an enquiry, where relevant;

- the type of support you are interested in;

- information you provide in an enquiry or subsequent correspondence;

- how you heard about BEAM, if you choose to tell us;

- records of our communications with you;

- technical and usage information made available by the website platform, hosting provider or enabled website tools, such as an IP address, device or browser information, pages visited, approximate location, timestamps and security logs; and

- cookie or analytics information where those tools are enabled and, where required, you have made a consent choice.

Please do not submit passwords, credentials, identity documents, transaction extracts, unrestricted production data, special personal information or other sensitive client information through the website enquiry form. At the enquiry stage, provide only enough information for us to understand the business need, intended outcome, timeframe and systems involved.

4. Where we obtain personal information

We generally obtain personal information:

- directly from you when you use the contact form, email us or otherwise communicate with us;

- from an authorised business contact who refers or introduces you;

- automatically through the website platform and enabled website tools; or

- from lawful public or professional sources where this is relevant to a genuine business enquiry.

If you give us another person’s information, you should have authority to do so and should direct them to this policy where appropriate.

5. Why we use personal information

We may process personal information to:

- receive, assess and respond to enquiries;

- understand the support requested and identify a suitable first step;

- arrange discussions, prepare a proposal or establish a business relationship;

- administer client, supplier and professional relationships;

- maintain business, correspondence and governance records;

- operate, secure, maintain and improve the website;

- prevent or investigate misuse, fraud or security incidents;

- meet legal, regulatory, accounting or recordkeeping requirements; and

- establish, exercise or defend legitimate rights.

Where required, we rely on consent. In other circumstances, processing may be necessary to take steps at your request, perform an agreement, comply with a legal obligation, protect legitimate interests or pursue a legitimate business purpose permitted by applicable law.

Fields marked as required on the contact form are needed for us to respond meaningfully. If you do not provide them, we may be unable to process the enquiry.

6. Direct marketing

We will not treat a general service enquiry as consent to receive unrelated marketing.

If BEAM introduces newsletters or other direct marketing, we will use an appropriate opt-in or other lawful basis and provide a practical way to unsubscribe. Service-related and administrative communications are not marketing.

7. When we may share personal information

We may make relevant personal information available, on a need-to-know basis, to:

- authorised BEAM personnel;

- hosting, website, email, security, communications or other service providers that support the website and enquiry process;

- professional advisers where reasonably necessary;

- a successor or transaction adviser in connection with a lawful business reorganisation, subject to appropriate safeguards; or

- public authorities, regulators, courts or other parties where disclosure is required or permitted by law.

We do not sell personal information.

Service providers may process information only for the relevant service and subject to the safeguards and instructions applicable to the relationship. The precise providers used by this website must be confirmed in the final approved policy and cookie information.

8. International processing

Some website, hosting, email or cloud service providers may store or process information outside South Africa.

Before publication, BEAM must confirm the providers, processing locations and applicable transfer safeguards. Where a cross-border transfer occurs, BEAM will use a lawful transfer basis and reasonable safeguards required by applicable law.

9. Cookies and website analytics

The website may use cookies or similar technologies that are necessary for security, navigation and core functionality. Optional analytics, advertising or other non-essential tools should be used only after their purpose and consent requirements have been confirmed and configured.

A cookie banner or settings tool, if enabled, should explain:

- the cookie or technology used;

- its provider and purpose;

- whether it is essential or optional;

- how long it remains active; and

- how you can accept, reject or change optional choices.

You can also control cookies through your browser. Blocking essential cookies may affect website functionality.

10. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including responding to an enquiry, maintaining appropriate business records, meeting legal or regulatory requirements, resolving disputes and protecting legitimate rights.

Retention periods may differ by record type. When information is no longer required, it should be securely deleted, destroyed or de-identified unless lawful retention or a legal hold applies.

Before publication, BEAM must confirm the retention periods or documented retention criteria that apply to contact-form submissions, email correspondence, website logs, analytics records and backups.

11. Security

BEAM applies reasonable technical and organisational safeguards appropriate to the information and the relevant risk. These may include restricted access, minimum-necessary handling, confidentiality controls, secure account management, incident escalation and service-provider oversight.

No online transmission or storage system can be guaranteed to be completely secure. Please use the contact form only for initial, non-sensitive information. If more detailed information is needed, BEAM will agree an appropriate information-sharing method and authority before collection.

12. Your rights

Subject to applicable law and any lawful limitations, you may ask BEAM to:

- confirm whether we hold personal information about you;

- provide access to qualifying personal information;

- correct or update inaccurate or incomplete information;

- delete or destroy information that we are no longer authorised to retain; or

- consider an objection to particular processing.

You may also withdraw consent where consent is the basis for processing. Withdrawal does not invalidate processing that was lawful before withdrawal.

To make a request, contact the privacy contact listed above. We may need reasonable information to verify your identity and understand the request before responding.

You may raise a privacy concern with BEAM or submit a complaint to South Africa’s Information Regulator through https://inforegulator.org.za/.

13. Children’s information

This is a business-services website and is not directed at children. Please do not submit children’s personal information through the website. If an engagement could involve children’s information, it must be separately identified, assessed and appropriately authorised before processing.

14. Links to other websites

The website may link to third-party websites or platforms. BEAM does not control their privacy practices. You should review the privacy information provided by those third parties before submitting personal information to them.

15. Changes to this policy

We may update this policy when our services, website tools, providers or legal obligations change. The current version and effective date will be displayed on this page.

Material changes should be reviewed before publication and, where appropriate, communicated through the website or directly to affected persons.

16. Contact us

Questions, concerns or requests relating to this policy may be sent to: