Privacy Policy

Last updated: [21 May 2026]

1. Who we are
   nodance web designs (“we”, “us”, “our”) provides small‑business website design and redesign services.

• Legal entity: Nodance Web Designs [sole proprietor]

• Address: Johannesburg, South Africa

• Contact: team@nodanceweb.com

• Data protection contact: team@nodanceweb.com

2. What data do we collect and why
   We collect and use personal data only where we have a lawful basis.

• Website usage and device data: IP address, cookie identifiers, pages viewed, timestamps, browser/OS.
  Purpose: site security, fraud prevention, analytics (with consent), site performance.
  Lawful basis: legitimate interests (security/performance); consent (analytics/marketing).

• Contact and enquiries: name, email, phone, company, project goals/budget, message content.
  Purpose: respond to enquiries, provide quotes, and schedule calls.
  Lawful basis: steps before entering a contract; legitimate interests (B2B sales).

• Client/project and billing data: billing contact, address, invoices, project briefs, assets, approvals.
  Purpose: deliver services, manage projects, invoice, and support.
  Lawful basis: contract; legal obligation (tax/accounting).

• Marketing preferences and communications: newsletter opt‑ins, email engagement (if subscribed).
  Purpose: send updates, case studies, offers (only with consent or soft opt‑in for existing clients where permitted).
  Lawful basis: consent; legitimate interests for existing clients (subject to local e‑privacy rules).

We do not intentionally collect special category data. Please avoid sending it to us.

3. Cookies and similar technologies
   We use necessary cookies to run the site and optional cookies (analytics/marketing) only with your consent. See our Cookie Policy to review or change your choices at any time.

4. How we share data

• Service providers (processors): hosting, email, CRM, analytics, project tools—bound by contract and confidentiality.

• Legal/compliance: where required by law or to protect rights.
  We do not sell personal data.

5. International transfers
   Where providers operate outside the EEA/UK, we use approved safeguards (e.g., EU Standard Contractual Clauses) and assess local laws and provider practices. Details available on request.

6. Data retention

• Enquiry records: up to 24 months from last interaction.

• Client/project and billing: up to 7 years after contract end.

• Analytics: per our Cookie Policy (typically 14–26 months) or until you withdraw consent.
  Data are deleted or anonymised when no longer needed.

7. Your rights (EEA/UK residents)
   You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests or direct marketing. You can withdraw consent at any time.
   To exercise rights: email team@nodanceweb.com.

8. How to complain
   Contact us at team@nodanceweb.com. You can also complain to your national supervisory authority. See the list at edpb.europa.eu

9. Security
   We apply appropriate technical and organisational measures: encryption in transit, access controls, MFA, patching, least‑privilege, vendor due diligence, and incident response.

10. Children
    Our services are not directed to children under 16; we do not knowingly process their data.

11. Changes
    We will update this page and the “Last updated” date. Material changes may be notified on‑site or by email.

12. Contact
    Data protection contact: team@nodanceweb.com