Introduction
TOMM Strategy + Branding ("TOMM", "we", "us", or "our") is a sole-proprietor consultancy operated by Mathilde Tomson-Myburgh, registered in South Africa (CIPC Reg. No. 2025/191572/07). We are committed to protecting your personal information and your right to privacy.
This Privacy Policy explains how we collect, use, store, and protect information about you when you visit our website, contact us, or engage our services. By using our website or services, you agree to the terms outlined in this policy.
This policy is drafted in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA), which governs the lawful processing of personal information in South Africa.
Information We Collect
We may collect the following categories of personal information:
- Contact information: Name, email address, phone number, company name
- Communication data: Messages you send via our contact form, email, or social media
- Business information: Details you share about your business for the purpose of engaging our services
- Usage data: Information about how you interact with our website, collected via cookies or analytics tools
- Payment information: Billing details as required to process invoices (we do not store card details)
How We Collect Information
We collect personal information in the following ways:
- Directly from you when you complete our contact form, send an email, or engage our services
- Automatically through website analytics (e.g. visitor behaviour, browser type, referring URL)
- Through third-party platforms such as Instagram or LinkedIn if you interact with us there
How We Use Your Information
We use your personal information only for legitimate business purposes, including:
- Responding to enquiries and providing quotes or proposals
- Delivering contracted services and managing client relationships
- Sending invoices and processing payments
- Communicating relevant updates, service information, or follow-ups
- Improving our website and service offerings
- Complying with legal obligations
We will never sell, rent, or share your personal information with third parties for marketing purposes without your explicit consent.
Legal Basis for Processing
Under POPIA, we process your personal information on the following grounds:
- Contractual necessity: To fulfil our obligations to you as a client
- Legitimate interest: To manage our business and respond to enquiries
- Consent: Where you have provided explicit consent (e.g. for marketing communications)
- Legal obligation: Where required by South African law
Data Retention
We retain your personal information only for as long as is necessary for the purposes described in this policy, or as required by law. Client records are typically retained for five (5) years following the conclusion of our engagement, in accordance with standard business and tax requirements.
Data Security
We take reasonable technical and organisational precautions to protect your personal information against unauthorised access, loss, or misuse. This includes secure email communication, password-protected cloud storage, and limiting access to your information to only those who need it. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Third-Party Services
We may use trusted third-party tools including Google Workspace, Squarespace, Canva, Trello, and Paystack. These services have their own privacy policies, and we share only the minimum information necessary with each provider.
Cookies
Our website may use cookies to improve your browsing experience and gather analytics data. You may adjust your browser settings to refuse cookies, though this may affect certain website functionality.
Your Rights
Under POPIA, you have the right to:
- Request access to the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of your personal information (subject to legal retention requirements)
- Object to or restrict the processing of your personal information
- Lodge a complaint with the Information Regulator of South Africa
To exercise any of these rights, please contact us at mathilde@tomm.co.za.
Contact
Mathilde Tomson-Myburgh
TOMM Strategy + Branding · CIPC Reg. No. 2025/191572/07
Cape Town, South Africa
mathilde@tomm.co.za · +27 61 401 5889
Changes to This Policy
We may update this Privacy Policy from time to time. The most current version will always be available on our website.