Last updated: 2 October 2026

1. Who we are

This website, ajaysart.co.za, is run by Ajay’s Art ([Registered business name], [Legal status, e.g. sole proprietor / (Pty) Ltd]). We are the responsible party for personal information collected through the site, our studios, classes, workshops, retreats and the online shop.

Information Officer: [Information Officer full name]
Phone / WhatsApp: 071 473 4469
Email: ajay@ajaysart.co.za
Kempton Studio: 2 Quinine Street, Kempton Park, 1619
Fourways Studio: 16b Penguin Drive, Fourways, Sandton
Website: ajaysart.co.za

2. What we collect

Contact and enquiry details ~ name, email, mobile number and your message when you use a contact, enquiry, newsletter or booking form.
Orders and bookings ~ what you buy or book, delivery or collection choice, delivery address and notes, order totals and payment status.
Student portal ~ your login email, name, phone number, class history, invoices and payments. Passwords are stored by our authentication provider in encrypted (hashed) form; we can’t see them.
Payments ~ card payments are processed by iKhokha on their secure payment page. We never see or store your card number. We receive only the result (paid / failed) and a transaction reference.
Site usage ~ anonymous statistics about how the site is used (pages visited, clicks, scroll depth, device type). See Cookies & Site Stats.
Children ~ if a learner under 18 attends classes, we collect their name and a parent or guardian’s contact details, with the parent or guardian’s consent.

3. Why we use it

To take, fulfil and deliver your orders and bookings, and to issue invoices and receipts.
To answer your enquiries and stay in touch about classes you’re booked on (including by WhatsApp, phone or email).
To run your student portal account and help you if you can’t log in.
To send you our newsletter and offers, only if you subscribed. You can unsubscribe at any time.
To keep accounting and tax records we are required by law to keep.
To keep the site secure and improve it, using anonymous statistics.

We process your information because it is needed to perform our agreement with you, because you consented (for example the newsletter), to comply with the law, or for our legitimate interest in running and improving the business. We do not sell your personal information.

4. Who we share it with

We share only what is needed, with service providers (operators) who process it on our behalf under confidentiality and security obligations:

Supabase ~ database and student portal login (servers in London, United Kingdom).
Netlify ~ website hosting and form handling (global content delivery network, United States based).
iKhokha ~ card payment processing (South Africa).
CallMeBot / WhatsApp ~ instant order and booking notifications sent to Ajay.
Contentsquare ~ website experience analytics (anonymised session and heatmap data).
Courier companies ~ your name, phone number and delivery address, when you choose courier delivery.
The Audacity Creative ~ our web developer, who maintains the site and may access data to support it.

We may also disclose information where the law requires it.

5. Information sent outside South Africa

Some of our providers store data outside South Africa (the United Kingdom and the United States). We use providers that are bound by data protection laws or agreements giving a level of protection substantially similar to POPIA, as section 72 of POPIA requires.

6. How long we keep it

Orders, invoices and payment records: 5 years (tax and accounting law).
Student portal and class records: while you are an active student, then up to 3 years.
Enquiries: up to 2 years. Newsletter: until you unsubscribe.
Anonymous site statistics: up to 13 months.

7. Security

The site runs over HTTPS. Access to customer data is limited to Ajay and authorised staff with individual logins, protected by database access rules. If we become aware of a security compromise affecting your information, we will notify you and the Information Regulator as POPIA requires.

8. Your rights

Under POPIA you may ask us to:

confirm what personal information we hold about you and give you a copy;
correct or update it;
delete it (where we are not required to keep it by law);
stop using it for direct marketing, or object to other processing.

Email ajay@ajaysart.co.za and we will respond within a reasonable time (normally within 30 days). We may need to confirm your identity first.

If you are unhappy with how we handled your information, you can complain to the Information Regulator (South Africa): inforegulator.org.za, email POPIAComplaints@inforegulator.org.za.

9. Changes

We may update this policy from time to time. The latest version is always on this page.

Privacy Policy