Privacy policy

Plain English. No dark patterns.

We're a small studio. We collect the minimum information we need to reply to you, deliver the work you hire us for, and keep our books. We don't resell, rent, or share your data with anyone for marketing purposes — full stop.

Last updated · 26 May 2026

1 · What we collect

When you interact with the Octava Solutions website, we collect three small categories of information:

  • Things you tell us. Your name, email, company, and the message you write — typically via our contact form, a discovery-call booking, or by emailing us directly.
  • Booking metadata. If you reserve a discovery call, we capture the slot you picked and a Google Calendar event ID so we can send a reminder and keep the time on our calendar.
  • Page-view counts. A first-party page-view beacon (no cookies, no fingerprinting) that records which page was viewed and roughly when. We never see who you are, which other sites you visited, or what you typed.

We do not use Google Analytics, Facebook Pixel, ad-network beacons, session replays, or third-party marketing trackers anywhere on the site.

2 · Why we collect it

  • To reply to your enquiry and deliver the work we agree.
  • To run our calendar and send a single confirmation email when you book a call.
  • To understand which pages are useful at an aggregate level — e.g. "the projects page is read more than the services page" — so we can keep improving the site.
  • To meet legal requirements (tax, accounting) for invoices we issue you as a paying client.

3 · Where it's stored

The website's database and uploaded files are hosted on Supabase in the EU (eu-west-1) region. The web application itself runs on a vendor that processes only HTTP requests — the payload of those requests (your form submission) is then written to Supabase and never leaves it.

Outbound emails are delivered via Resend or your studio Gmail account, depending on the channel. Both process email content only as long as needed to deliver it.

We use industry-standard transit encryption (TLS 1.3) and encryption-at-rest on Supabase. Database backups run daily.

4 · Who can see it

Only the Octava Solutions team has access to the database and admin panel. We don't sell, rent, share, or syndicate your information.

The only third parties involved in routine processing are listed above (Supabase, the email vendor, and Google Calendar if you book a call). We disclose information to government authorities only where compelled by a valid legal request from a South African court.

5 · How long we keep it

  • Contact-form submissions: 24 months from the last interaction, then archived.
  • Booking records: 24 months from the call date, then deleted.
  • Client project records, invoices and quotes: 7 years (POPIA + tax retention requirement).
  • Page-view counters:Aggregate counts only; we don't store per-visitor histories.

You can ask us to delete anything that isn't legally required to retain. See "your rights" below.

6 · Your rights

Under the Protection of Personal Information Act (POPIA) and equivalent international regimes (GDPR, UK DPA), you can ask us at any time to:

  • Tell you what we hold about you (right of access).
  • Correct anything that's inaccurate (right to rectify).
  • Delete your information (right to erasure), subject to the retention rules in section 5.
  • Send you a portable copy of your data (right to data portability).
  • Stop processing your data for any non-essential purpose (right to object).

Email support@octava.co.zawith the word "privacy" in the subject and we'll respond within five business days.

7 · Cookies & tracking

The marketing site uses no third-party cookies. We set a single first-party session cookie only after a member of our team signs into the admin panel — you, as a visitor, will never see it.

We honour the global "Do Not Track" browser flag for our analytics beacon: if your browser sends it, we don't record the page view at all.

8 · Children

Our services are aimed at businesses and adults working at businesses. We don't knowingly collect information from anyone under 18. If you believe we have, email us and we'll delete it immediately.

9 · Changes to this policy

If we materially change how we handle data, we'll update this page, bump the "last updated" date, and email anyone with an active engagement at least 14 days before the change takes effect. Minor wording fixes are made silently.

10 · Contact

The Information Officer for Octava Solutions is reachable at support@octava.co.za. You can also phone us on +27 11 555 0199 during South African business hours (Mon–Fri 09:00–17:00 SAST).

Questions about this document? We answer them ourselves. Reach out and a real person will reply within one business day.