Privacy Policy
How we collect, use, and protect information provided to Coledon.
Related
Overview
Coledon ("we", "us", "our") is committed to protecting the privacy of individuals who visit our website and those who enquire about or engage our services. This Privacy Policy describes how we collect, use, store, and share information in connection with our website at coledon.co.za and our service delivery.
This policy is intended to comply with the Protection of Personal Information Act (POPIA) of South Africa, as well as the UK General Data Protection Regulation (UK GDPR) and EU GDPR where applicable to international clients.
By using our website or submitting an enquiry, you acknowledge that you have read and understood this Privacy Policy.
Information We Collect
We collect information in three primary ways: information you provide directly, information collected automatically when you visit our website after granting analytics consent, and information from third-party services we use to deliver our services.
Information you provide directly
- Name and contact details submitted via enquiry or contact forms
- Business name and professional information
- Email address for correspondence
- Project details and requirements described in communications
- Any other information you voluntarily provide in communications with us
Information collected automatically
- Browser type, version, and operating system
- Pages visited, time spent on pages, and navigation paths
- Referring website or source
- IP address and approximate geographic location
- Device type and screen resolution
Automatic collection may occur through analytics and tag management tooling that we enable only after consent, including Google Analytics 4 and Google Tag Manager where configured for the deployment.
How We Use Your Information
We use the information we collect for the following purposes, each with a legitimate legal basis:
We do not sell, rent, or trade personal information to third parties for marketing purposes. We do not use your information for automated decision-making or profiling.
- Service delivery
- To respond to enquiries, prepare proposals, and deliver the services you engage us for. Legal basis: Contract performance and legitimate interests.
- Communication
- To correspond with you about your project, answer questions, and provide updates. Legal basis: Contract performance and legitimate interests.
- Website improvement
- To understand how our website is used and identify areas for improvement. Legal basis: Consent and legitimate interests.
- Legal compliance
- To comply with applicable laws, regulations, and professional obligations. Legal basis: Legal obligation.
Data Sharing & Third Parties
We share personal information only in the following limited circumstances:
- Google LLC: for analytics and tag management where these services are enabled and consented to
- Email service providers: for business correspondence
- Professional advisors: where legally required (lawyers, accountants)
- Law enforcement or regulatory bodies: where legally obligated
All third-party service providers are required to process personal information in compliance with applicable data protection laws and only for the purposes specified.
Data Retention
We retain personal information for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law.
- Enquiry data
- Retained for 24 months from the date of initial contact. If an engagement results, data is retained for the duration of the engagement plus 7 years for financial and legal compliance.
- Analytics data
- Retained within the configured analytics platform according to the retention period set in that platform.
- Email correspondence
- Retained for 7 years in line with standard business record-keeping practices.
Your Rights
Depending on your location, you may have the following rights in relation to your personal information:
- Right to access: request a copy of the personal information we hold about you
- Right to rectification: request correction of inaccurate information
- Right to erasure: request deletion of your personal information in certain circumstances
- Right to restriction: request that we limit how we use your information
- Right to data portability: receive your information in a structured, machine-readable format
- Right to object: object to processing based on legitimate interests
To exercise any of these rights, contact us at info@coledon.co.za. We will respond within 30 days. We may need to verify your identity before processing your request.
Contact & Complaints
If you have questions about this policy or our data practices, please contact us:
If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. In South Africa, this is the Information Regulator. In the UK, this is the Information Commissioner's Office (ICO).
- info@coledon.co.za
- Location
- Cape Town, South Africa
This document was last updated on 22 April 2026. If you have questions about any section, please contact us.
Related Documents
Support
Have questions?
If anything in this document is unclear or you would like to discuss a specific concern, we are happy to respond directly and promptly.