Privacy Policy
1. Who we are. First Edit Africa (Pty) Ltd (Reg. No. 2024/034421/07), Corner Portswood & Dock Road, The Pavilion, V&A Waterfront, Cape Town, South Africa, is the responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA) and the controller under the EU General Data Protection Regulation (GDPR) for the information collected on firsteditafrica.com.
2. Information Officer. Olivier Gallard, registered with the Information Regulator under number 2026-069527. Contact: popia@firsteditafrica.com. We have no establishment in the European Union.
3. Information we collect.
- Contact form: name, email address, company, message.
- Consultation booking (Calendly): name, email address, time slot and any information you add.
- Emails you send us.
- Technical data: IP address, browser, pages visited, and cookies as described in our Cookie Policy.
We do not ask for special personal information (such as health, religion or political opinions). Please do not send it.
4. Why we use it, and on what basis.
| Purpose | Lawful basis (POPIA s11 / GDPR Art. 6) |
|---|---|
| Answer your enquiry and prepare a proposal | Steps at your request before a contract; legitimate interest |
| Manage our business relationship | Performance of a contract; legitimate interest |
| Measure website audience (analytics cookies) | Your consent |
| Secure the website and prevent spam | Legitimate interest |
| Comply with legal obligations | Legal obligation |
We do not sell your personal information. We do not send marketing emails without your consent.
5. Who receives it. Only our service providers, acting on our instructions: Hostinger (hosting), Cloudflare (network and security), Calendly (bookings), Google (analytics and reCAPTCHA anti-spam), and our email provider. Our sister company First Edit Asia Advisory Limited (Hong Kong) receives your information only if your project concerns Asia and you agree.
6. Transfers outside South Africa and the EU. Some providers process data outside South Africa, in particular in the United States and the EU. Under section 72 of POPIA, we only use providers bound by laws, binding corporate rules or contracts that provide adequate protection. For EU visitors, providers in the United States rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. Information you send us is processed in South Africa, which is not covered by an EU adequacy decision; our safeguards are described in this policy.
7. Retention. Enquiries that do not lead to an engagement: 24 months after our last exchange. Client data: for the duration of the engagement, then as long as required by law. Analytics data: 14 months.
8. Security. We take reasonable technical and organisational measures to protect your information (HTTPS, access controls, updates, backups). If a security compromise affects your information, we will notify the Information Regulator and you, as required by section 22 of POPIA, and, where the GDPR applies, the competent authority within 72 hours.
9. Your rights.
- Under POPIA: access, correction, deletion, objection to processing, and withdrawal of consent.
- Under the GDPR, if you are in the EU: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time.
Write to popia@firsteditafrica.com. We reply within 30 days. We may ask you to confirm your identity.
10. Complaints. You may complain to the Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg — POPIAComplaints@inforegulator.org.za. If you are in the EU, you may also complain to the data protection authority of your country (in France: CNIL, cnil.fr).
11. Changes. We may update this policy. The version published on the website applies.
Last updated: 4 November 2026
© 2026 First Edit Africa (Pty) Ltd. All rights reserved.