Privacy Policy
Effective date: 22 July 2026 · Last updated: 22 July 2026
Ultimate Marketing Smash (Pty) Ltd ("UMS", "we", "us", or"our") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what information we collect, how we use it, and your rights in terms of the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African privacy legislation.
By using our website at ultimatemarketingsmash.com or engaging our services, you agree to the collection and use of information in accordance with this policy.
1. Who We Are
Ultimate Marketing Smash (Pty) Ltd is a South African digital studio offering web and app development, digital marketing, social media management, and advertising services. We are registered in South Africa and our principal place of business is Pongola, KwaZulu-Natal.
Information Officer: Ryno van der Walt
Email: Manager@ultimatemarketingsmash.com
2. Information We Collect
2.1 Information you provide directly
When you contact us through our website contact form or by email, we collect:
- Your name
- Your email address
- Your phone number (if provided)
- The content of your enquiry or message
- Your company or business name (if provided)
When you become a client and engage our services, we may also collect:
- Billing information (business name, address, VAT number)
- Social media account credentials or access tokens (solely to perform marketing services on your behalf)
- Brand assets, logos, and marketing materials provided to us for use in delivering services
2.2 Information collected automatically
When you visit our website, we and our third-party service providers may automatically collect:
- IP address and approximate geographic location
- Browser type and version
- Pages visited and time spent on each page
- Referring website or search terms
- Device type and operating system
This information is collected through cookies and similar tracking technologies (see Section 6 below).
3. How We Use Your Information
We use the personal information we collect to:
- Respond to your enquiries and communicate with you about our services
- Prepare and deliver proposals, invoices, and service agreements
- Deliver the web development, marketing, or advertising services you have contracted us to provide
- Send service-related notifications and updates
- Improve our website, content, and service offerings
- Comply with our legal obligations under South African law
- Prevent fraud and maintain the security of our systems
We will only use your personal information for the purposes for which it was collected, or for a compatible purpose that you would reasonably expect.
4. Legal Basis for Processing
We process your personal information on the following lawful grounds:
- Consent — where you have voluntarily provided your information via our contact form or signed up to receive communications from us.
- Contractual necessity — where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
- Legitimate interests — where processing is necessary for our legitimate business interests, such as improving our services and website analytics, provided those interests are not overridden by your rights.
- Legal obligation — where we are required to process your information to comply with South African law.
5. Sharing Your Information
We do not sell, rent, or trade your personal information to third parties. We may share your information with trusted service providers who assist us in operating our business, including:
- Vercel Inc. — website hosting and deployment (servers located primarily in the United States)
- Supabase Inc. — database and back-end infrastructure
- Google LLC — analytics (Google Analytics 4) and advertising (Google Ads)
- Meta Platforms Inc. — advertising campaign management (Meta Ads / Facebook Ads) and website analytics (Meta Pixel) where applicable
- Resend / email service providers — transactional email delivery
Each of these providers is contractually bound to handle your information securely and only for the specific purpose for which we share it. Where information is transferred outside South Africa, we take appropriate steps to ensure an adequate level of protection as required by POPIA.
We may also disclose your information where required to do so by law or in response to a valid order from a court or regulatory body.
6. Cookies
Our website uses cookies and similar technologies to enhance your browsing experience and to understand how visitors use the site. Cookies are small text files placed on your device.
We use the following types of cookies:
- Essential cookies — necessary for the website to function correctly (e.g., session management).
- Analytics cookies — used by Google Analytics to collect aggregated information about website usage. This data helps us understand how our site is used so we can improve it.
- Marketing cookies — where a Meta Pixel or Google Ads tag is active, these track conversions and support ad targeting.
You can control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of the website.
7. Data Retention
We retain your personal information only for as long as is necessary for the purposes for which it was collected, or as required by law:
- Contact enquiries — retained for 2 years from the date of last contact, or for as long as a business relationship exists.
- Client records — retained for at least 5 years after the end of the service engagement to comply with South African tax and accounting requirements.
- Website analytics — retained in accordance with the data retention settings of Google Analytics (typically 14 months) or the applicable provider.
8. Security
We implement reasonable technical and organisational security measures to protect your personal information against unauthorised access, loss, disclosure, or destruction. These measures include encrypted communications (HTTPS), access controls, and secure hosting infrastructure.
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
9. Your Rights Under POPIA
As a data subject under POPIA, you have the right to:
- Access — request a copy of the personal information we hold about you.
- Correction — request that we correct inaccurate or incomplete information.
- Deletion — request that we delete your personal information, subject to our legal obligations to retain certain records.
- Objection — object to the processing of your personal information where we are relying on legitimate interests as the legal basis.
- Withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
- Lodge a complaint — submit a complaint to the Information Regulator of South Africa if you believe your rights have been infringed.
To exercise any of these rights, please contact us at Manager@ultimatemarketingsmash.com. We will respond within a reasonable time, and no later than 30 days.
You may also contact the Information Regulator (South Africa) at www.justice.gov.za/inforeg.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party site you visit.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the revised policy.
12. Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your personal information, please contact us:
Ultimate Marketing Smash (Pty) Ltd
Pongola, KwaZulu-Natal, South Africa
Manager@ultimatemarketingsmash.com