1. Responsible party

Dreamwise Agency is the responsible party for personal information collected viadreamwiseagency.co.za. Contact: hello@dreamwiseagency.co.za.

2. Purpose of processing

• Responding to enquiries and providing quotes
• Delivering contracted services
• Project communication and invoicing
• Authorised security reviews within an agreed scope, with careful handling of any personal information encountered
• Legal and regulatory compliance

3. Lawful basis

We process personal information with your consent (forms, wizard), to perform a contract, or where required by law. For security testing, processing is limited to the authorised engagement and agreed testing scope.

4. Data subject rights

Under POPIA you may request to:

• Access your personal information
• Correct inaccurate data
• Delete data where lawfully permitted
• Object to processing in certain circumstances
• Lodge a complaint with the Information Regulator

5. Security measures

HTTPS encryption, access controls, and secure hosting. During authorised security reviews we avoid unnecessary access to customer information and treat findings as confidential. See our Security Policy.

6. Cross-border transfers

Some service providers (e.g. hosting) may process data outside South Africa. We ensure appropriate safeguards are in place.