Privacy Policy

1. Introduction

Spark Theory ("we", "us", or "our") operates the website sparktheory.co.za. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa and applicable international data protection standards.

2. Information We Collect

We collect information in the following ways:

2.1 Information you provide

When you use our contact form, you voluntarily provide your name, email address, and message. This information is processed by Formspree (our third-party form handler) and delivered to us via email.

2.2 Information collected automatically

If you consent to analytics cookies, Google Analytics collects anonymised usage data including: pages visited, time spent on site, approximate geographic location (country/city level), device type, browser type, and referring website. IP addresses are anonymised before storage. No personally identifiable information is collected through analytics.

3. How We Use Your Information

We use the information collected for the following purposes:

• To respond to your contact form enquiries
• To understand how visitors use our website and improve the user experience (via anonymised analytics)
• To ensure the technical functionality and security of our website

4. Legal Basis for Processing

Under POPIA, we process your personal information on the following grounds: (a) your consent, which you provide when submitting the contact form or accepting analytics cookies; (b) our legitimate interest in understanding site usage to improve our services. You may withdraw consent at any time by clearing your browser's localStorage or contacting us.

5. Third-Party Services

We use the following third-party services:

• Google Analytics (Google LLC) — website usage analytics. Data is anonymised and processed in accordance with Google's Privacy Policy. Only loaded with your consent.
• Formspree (Formspree Inc.) — contact form processing. Data submitted through the form is transmitted to Formspree and forwarded to our email. See Formspree's Privacy Policy.
• Vercel (Vercel Inc.) — website hosting. Vercel may collect server logs including IP addresses. See Vercel's Privacy Policy.

6. Data Retention

Contact form submissions are retained only for as long as necessary to respond to your enquiry. Google Analytics data is retained for 14 months, after which it is automatically deleted. Cookie consent preferences are stored in your browser's localStorage and persist until you clear your browser data.

7. Your Rights Under POPIA

As a data subject under POPIA, you have the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of your personal information
• Object to the processing of your personal information
• Withdraw your consent at any time
• Lodge a complaint with the Information Regulator (South Africa)

8. International Data Transfers

Some of our third-party service providers (Google, Formspree, Vercel) operate outside of South Africa. By using our website and providing consent, you acknowledge that your data may be processed in jurisdictions with different data protection laws. These providers maintain appropriate safeguards for the protection of your personal information.

9. Security

We take reasonable measures to protect your personal information. Our website is served over HTTPS. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our website is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the website after changes constitutes acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at: