Privacy Policy
In terms of the Protection of Personal Information Act, 4 of 2013 (POPIA). Last updated: 7 October 2026.
1. Who we are
vVvone Consulting (Pty) Ltd ("vVvone", "we", "us") is a marketing consultancy in Cape Town, South Africa. We handle personal information in two roles:
- As the responsible party for information collected through this website and through our own marketing.
- As an operator for our clients, when we run their advertising. The client is then the responsible party, and we process the information only on the client's instructions, under a written agreement.
2. What we collect on this website, and why
On this website we only collect personal information you choose to give us, for one purpose: responding to your enquiry about our services.
- Enquiry form: your name, business name, email address, phone number, and your answers to our qualifying questions (business type, approximate client value, current marketing channels, where you would like to start). We use these to prepare for and book your call.
- Direct contact: anything you send us by email, phone or WhatsApp.
The legal basis for processing is your consent, which you give by ticking a consent box before submitting the enquiry form, plus our legitimate interest in responding to an enquiry you started.
3. Cookies, analytics and advertising on this website
This website uses Google Analytics, Google Tag Manager, Google advertising tags and the Meta Pixel. We use them to understand how visitors use the site and to measure whether our own adverts work.
- What they do. We, and third parties including Google and Meta, may use cookies, pixels, web beacons and similar storage technologies to collect or receive information from this website and elsewhere on the internet. Those third parties use that information to provide measurement services and to target and deliver adverts, including ours.
- What is collected. Technical information such as pages viewed, buttons used, device and browser type, approximate location and the page you arrived from, linked to cookie or device identifiers. When you submit the enquiry form we record that a form was submitted. We do not send your name, email address or phone number to Google Analytics or the Meta Pixel.
- Google advertising features. Where we use Google Analytics advertising features, such as remarketing or demographic and interest reports, first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as Google advertising cookies) are used together. You can read how Google uses information from sites that use its services.
How to opt out. The site works fully without these tools. You can:
4. What we do not do
- We do not sell, rent, license or trade personal information. Ever.
- We do not add you to marketing lists you did not ask for.
- We do not contact you about anything other than the enquiry you made, unless you separately agree to it.
- We do not build profiles of individuals, or use any data to discriminate against people or to monitor them.
5. Who processes information on our behalf
We use a small number of service providers ("operators" under POPIA), each only to the extent needed and under obligations to use the information only for us:
- Form delivery: our enquiry form is delivered to our inbox by a form-handling service (FormSubmit). Your submission passes through their systems solely for delivery.
- Website hosting: this site is served by Cloudflare, which may log standard technical data (IP address, browser type) for security and performance.
- Email and documents: Google Workspace.
- Analytics and advertising platforms: Google and Meta, for the purposes described in sections 3, 6 and 7.
- AI provider: Anthropic, which helps us analyse client advertising account data and prepare changes, as described in sections 6 and 7.
Some of these providers process data outside South Africa. Where they do, POPIA's cross-border transfer requirements (section 72) apply, so we only use providers subject to laws or agreements that protect your information to a substantially similar standard.
6. Google Ads data we access through Google's API
vVvone Consulting uses its own internal software, connected to the Google Ads API, to manage the Google Ads accounts that our clients link to our Google Ads manager account. Only vVvone Consulting uses this software. It is not offered to the public or to other businesses, and nobody outside vVvone signs in to it.
- What we access. Data in the client Google Ads accounts linked to our manager account: account settings, campaigns, ad groups, keywords, ads, assets, search terms, budgets, costs, performance statistics, conversion actions and call reports (for example call time, call length and the caller's area code). The software connects through a Google Cloud service account that has been given access through our manager account. It does not ask anyone to sign in with their own Google account. It does not access Gmail, Google Drive, contacts or any other Google account data.
- How we use it. Only to report on, plan, build and manage advertising for the client that owns the account, within the scope of our written agreement with that client. New campaigns are created paused, so they can be reviewed before they run.
- Who we share it with. The client who owns the account, and service providers that process it on our behalf under confidentiality obligations, including our AI provider (Anthropic). We do not sell Google Ads data. We do not use one client's data for another client, for our own advertising, or to build profiles of individuals.
- How we protect it. The software's access credentials are stored only on vVvone Consulting's own devices, can be read only by the account that runs the software, and are never shared or sent by email. Data travels over encrypted connections, and every change the software makes is logged.
- Retention and deletion. Reports and data extracts are kept for the duration of the client engagement and deleted within 90 days after it ends, or sooner on request. A client can withdraw our access at any time by unlinking our manager account in Google Ads (Admin › Access and security › Managers).
- Limited Use. vVvone Consulting's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use data received from Google APIs to develop, improve or train generalised AI or machine-learning models.
7. Meta advertising data we access through Meta's APIs
We use Meta's Marketing API and related Meta business tools, through apps and tools registered to vVvone Consulting with Meta, to manage the Facebook and Instagram advertising of clients who give us access through their Meta business account. Only vVvone Consulting uses these tools, and only for clients who have given us access.
- What we access. Data in the client's ad accounts and connected assets: account settings, campaigns, ad sets, ads, creative, audience settings, budgets, spend and performance insights; the Facebook Pages and Instagram accounts used to run the client's adverts; event data from the client's Meta Pixel or Conversions API; and, where the client runs lead form adverts and asks us to deliver the leads, the answers people submit on those forms (such as name, email address, phone number and answers to the form's questions).
- How we use it. Only on behalf of, and at the direction of, the client that owns the account, to plan, build, run and report on that client's advertising within our written agreement. We never use it for our own purposes or for another client. New campaigns on Google and Meta are created paused, so they can be reviewed before they run. Each client's data is kept separate from every other client's.
- Lead form responses. When someone fills in a client's lead form, the client is the responsible party and the client's own privacy policy applies. We pass the lead to the client promptly and keep a copy only as long as needed to deliver and report on the campaign.
- What we never do with it. We do not sell, license or buy Meta platform data. We do not use it to build or add to profiles of people, to discriminate against anyone, or for any kind of surveillance. We do not share or transfer a client's custom audiences to anyone else.
- Who we share it with. The client who owns the account, and service providers that process it only for us, at our direction and under written obligations, including our AI provider (Anthropic).
- Retention and deletion. We delete Meta platform data as soon as it is no longer needed for the client's campaigns, and in any case within 90 days after the engagement ends. We delete it sooner if the client, the person it relates to, or Meta asks us to.
- Security. We protect this data with the measures in section 12. If it is ever compromised, we notify the client, Meta and the Information Regulator as the law and Meta's terms require.
- Withdrawing access. A client can remove our access at any time in Meta Business Settings, under Partners or People.
8. How to ask us to delete your data
You can ask us to delete personal information we hold about you at any time, including information we received through Google's or Meta's platforms.
- Email nathi@vvvone.com with the subject "Data deletion request".
- Tell us the name, email address or phone number you used, and, if it applies, the business whose advert or form you responded to.
- We confirm receipt within 5 business days and complete the deletion within 30 days, unless the law requires us to keep something. We tell you when it is done.
- Where we hold the information as an operator for a client, we delete our copy and pass your request to that client, who is responsible for its own records.
9. How long we keep it
Enquiry information is kept for as long as needed to handle your enquiry and any business relationship that follows. If no relationship follows, we delete enquiry records within 24 months, unless the law requires longer retention. Client advertising account data is kept as set out in sections 6 and 7.
10. Your rights under POPIA
You may at any time:
- ask what personal information we hold about you (access);
- ask us to correct or update it (correction);
- ask us to delete it (deletion), subject to any legal retention duties, as set out in section 8;
- withdraw your consent or object to processing (objection);
- opt out of any further contact with one reply. Every message from us honours "stop" immediately.
To exercise any of these rights, email the Information Officer: nathi@vvvone.com. We respond within a reasonable time and at no charge for reasonable requests.
11. Complaints
If you believe we have processed your personal information unlawfully, you may complain to us first (we'd appreciate the chance to fix it), or directly to the Information Regulator (South Africa):
12. Security
We take reasonable, appropriate technical and organisational measures to protect personal information against loss, damage and unauthorised access. These include serving this site over HTTPS, keeping access credentials on our own devices only, keeping each client's data separate, and limiting access to enquiry records and client data to the people who handle them.
13. Changes to this policy
If we change this policy, the updated version is published on this page with a new "last updated" date. Material changes will be flagged clearly. Our Terms of Service set out the terms on which we provide our website and services.