Privacy Policy

Who we are

Conkrete is a hand-craft concrete studio based in Durbanville, Cape Town. For the purposes of POPIA, Conkrete is the responsible party that decides why and how your personal information is processed.

Information Officer

Leonardo Fortuin is our designated Information Officer. You can reach the Information Officer using the contact details at the end of this policy for any question or request about your personal information.

What information we collect

We collect only what we need to respond to you and to make the work.

Information you give us

• Your name
• Your email address
• Your phone number, if you choose to give it
• The details of your enquiry or commission, including anything you tell us about your space, brief, or budget

Information we collect automatically

Our hosting provider keeps standard server logs that may include your IP address, browser type, and the pages you visit. These logs are used to keep the site secure and running. We also measure how the site is used — see Cookies and analytics below.

How we use your information

We use the information you give us to:

• Respond to your enquiry and answer your questions
• Prepare quotes, samples, and commissions
• Arrange delivery and after-sales care
• Keep records of agreed work for as long as the law requires

We do not use your information for automated decision-making, and we do not sell it.

Our lawful basis

We process your information on the basis of your consent when you contact us, and on the basis of our legitimate interest in responding to enquiries and fulfilling work you have asked us to do. Where the law requires us to keep certain records, we process your information to meet that obligation.

Who we share it with

We keep your information within the studio. We share it only with the service providers we need to operate, and only to the extent needed:

• Our website and email hosting provider, which stores enquiries and messages on our behalf
• Delivery partners, where a piece needs to be transported to you
• Google, as our analytics provider, in the limited and consent-gated way described below

These providers are required to protect your information and to use it only for the service they provide to us. We do not sell or rent your personal information to anyone.

How long we keep it

We keep enquiry details for as long as we are in conversation with you and for a reasonable period afterwards, in case you return. Where you become a client, we keep records of the work for as long as the law requires, usually up to five years after the work is complete. When we no longer need your information, we delete or anonymise it.

Cookies and analytics

We use Google Analytics 4 to understand which pages people read and how they found us.

Analytics consent defaults to denied. Until you accept, Google Analytics runs in a cookieless mode: no analytics cookies are written and no identifiers are stored on your device. We measure page views and a small set of interactions — which page was viewed, which link or download was used, how far an article was read — in aggregate only.

If you accept analytics using the banner, Google Analytics sets its own cookies so that repeat visits can be recognised. You can change your mind at any time using the Cookie preferences link in the footer of every page. Your choice is remembered in your browser's local storage under conkrete_consent; that value stays on your device and is never sent to us.

We do not run advertising cookies, we do not build advertising profiles, and we never send personal information — names, email addresses, phone numbers, or the contents of an enquiry — to our analytics provider. IP addresses are anonymised.

The enquiry form uses one strictly necessary measure to keep the form secure while you fill it in. It carries no tracking function.

Your rights under POPIA

POPIA gives you rights over your personal information. You may:

• Ask what personal information we hold about you, and ask for a copy of it
• Ask us to correct information that is wrong or out of date
• Ask us to delete information we no longer have a reason to keep
• Object to us processing your information in certain circumstances
• Withdraw consent you have given, without affecting processing that has already taken place
• Complain to the Information Regulator

How to access or delete your information

To ask for a copy of your information, to correct it, or to have it deleted, email us at info@conkrete.co.za with the words “data request” in the subject line. We will confirm your identity and respond within a reasonable time, and within any period set by law. There is no charge for a reasonable request.

How we protect your information

The site is served over an encrypted HTTPS connection. We apply reasonable technical and organisational measures to guard your information against loss, misuse, and unauthorised access. No method of transmission or storage is completely secure, so we cannot promise absolute security, but we take it seriously.

Where your information is stored

Our site and email are hosted on servers located in South Africa. Analytics data is processed by Google, which may store and process it outside South Africa. Where any provider processes information outside South Africa, we make sure it is protected by a comparable level of safeguard, as POPIA requires.

Children’s information

Our work is intended for adults, and we do not knowingly collect information about children. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top of the page. Material changes will be noted on this page.

Contact us

For any question about this policy or your personal information, reach our Information Officer:

• Conkrete — Information Officer, Leonardo Fortuin
• Durbanville, Cape Town, South Africa
• info@conkrete.co.za
• +27 84 587 5536

The Information Regulator

If you are not satisfied with how we have handled your information, you may complain to the Information Regulator (South Africa) at POPIAComplaints@inforegulator.org.za or inforegulator.org.za.