1. Who we are

Dreamwise Agency ("we", "us", "our") operates dreamwiseagency.co.za. We are a digital agency based in South Africa. For privacy enquiries, contact us at hello@dreamwiseagency.co.za.

2. Information we collect

We may collect:

• Contact details (name, email, phone) when you submit forms
• Project information you provide via our wizard or estimator
• Security-testing enquiry details such as website URL, platform notes, and authorisation confirmation (never passwords or confidential credentials via public forms)
• Technical data (IP address, browser type) via standard server logs
• Communication records when you email, call, or message us

3. How we use your information

• To respond to enquiries and provide quotes
• To deliver projects and ongoing support
• To send project updates and invoices
• To perform authorised security reviews within an agreed scope and handle findings confidentially
• To improve our website and services
• To comply with legal obligations

4. Sharing your information

We do not sell your personal information. We may share data with trusted service providers (hosting, payment processors, email) solely to operate our business. We require them to protect your data appropriately.

5. Data retention

We retain contact and project data for as long as needed to fulfil our services and legal obligations. Security-testing records, authorisation confirmations and findings are retained only as needed for the engagement and related legal duties, then securely disposed of when no longer required. You may request deletion of your data subject to applicable law. Where testing incidentally encounters personal information, we avoid unnecessary access, handle it carefully, and do not use it for marketing.

6. Your rights

Under POPIA (Protection of Personal Information Act), you have the right to access, correct, or delete your personal information. Contact us at hello@dreamwiseagency.co.za to exercise these rights.

7. Security

We use HTTPS on all deployments, validate form inputs, and protect against spam. API keys and payment credentials are stored in server-side environment variables only — never in public website code. See our Security Policy for full details.

8. Cookies

Our website may use essential cookies for functionality and analytics cookies to understand usage. You can control cookies through your browser settings.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the latest version.