Privacy Policy

Hollywood Cape Town (Pty) Ltd Last updated: 18 August 2026

---

1. Who we are

Hollywood Cape Town (Pty) Ltd (“Hollywood Cape Town”, “we”, “us”, “our”) is a performance marketing agency registered in South Africa.

We are the “responsible party” under the Protection of Personal Information Act 4 of 2013 (“POPIA”) and the “controller” under the EU and UK General Data Protection Regulation (“GDPR”) in respect of the personal information described in this policy.

Where we handle personal information on behalf of a client — for example, leads generated by advertising campaigns we run for them — we act as an “operator” under POPIA and a “processor” under GDPR. In those cases the client’s own privacy policy governs how that information is used, and we process it only on their documented instructions under a written agreement.

2. What this policy covers

This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and what rights you have. It applies to our website at [insert domain], to enquiries and communications with us, and to our dealings with clients, prospective clients, suppliers and applicants.

3. The information we collect

Information you give us

• Name, job title, company name
• Email address, telephone number, physical or postal address
• The content of enquiries, briefs, messages and call notes
• Billing and payment details, VAT and company registration numbers
• Information contained in proposals, contracts and campaign materials
• CV and application details, if you apply to work with us

Information we collect automatically

• IP address, approximate location, device type, browser and operating system
• Pages visited, referring URL, time on page and other usage data
• Cookie and pixel identifiers (see section 7)

Information from other sources

• Publicly available business information, including company websites, LinkedIn and business directories
• Analytics and advertising platforms such as Meta and Google, in aggregated or pseudonymised form
• Referrals from mutual contacts and existing clients

We do not seek to collect special personal information as defined in POPIA (such as health, religious or biometric information) or special category data under GDPR, and we ask that you do not send it to us.

4. Why we process it, and on what legal basis

Where we rely on legitimate interests, our interest is in running, marketing and protecting a lawful business. We have considered whether that interest is outweighed by your rights and freedoms, and you may object at any time (see section 13).

5. Where processing is voluntary

Giving us your personal information is voluntary. Some of it, though, is necessary for us to do the thing you are asking for. If you do not give us the details needed to reply to an enquiry, issue an invoice or deliver a service, we may not be able to proceed.

6. Children

Our website and services are aimed at businesses and are not directed at children. We do not knowingly collect the personal information of anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

7. Cookies, pixels and tracking

We use cookies and similar technologies on our website. A cookie is a small text file placed on your device.

• Strictly necessary cookies keep the site working — security, load balancing and remembering your cookie preferences. These do not require consent.
• Analytics cookies tell us how the site is used, so we can improve it.
• Advertising and remarketing cookies allow us and our advertising partners to measure campaign performance and show you relevant ads on other platforms.

We currently use [Google Analytics 4, the Meta Pixel and Conversions API, the LinkedIn Insight Tag — amend to match what is actually installed]. Some of these place cookies and share limited data with those providers, who act as independent controllers for their own purposes.

Non-essential cookies are only set once you consent through our cookie banner. You can change or withdraw your preferences at any time using the banner or the [cookie settings link], and you can block or delete cookies in your browser settings. Blocking some cookies may affect how the site works.

8. Direct marketing

We may send you information about our services by email or other electronic means where you are an existing client, where you have consented, or where the law otherwise allows it. In line with section 69 of POPIA, we will not send unsolicited electronic direct marketing to anyone who is not an existing customer without consent, and we will honour any objection.

Every marketing message includes an unsubscribe link. You can also opt out at any time by emailing jonno@hollywood.capetown. Opting out of marketing does not stop administrative messages about work we are doing for you.

9. Who we share information with

We share personal information only where we need to, and only with:

• Service providers and operators who help us run the business — hosting and website providers, email and productivity platforms, project management and CRM tools, accounting software, payment processors, and specialist creative and technical suppliers. They act on our instructions under written agreements requiring confidentiality and appropriate security.
• Advertising and analytics platforms such as Meta and Google, where you have consented to the relevant cookies or where a client has instructed us to run campaigns on their behalf.
• Our clients, where you have submitted an enquiry through an advertising campaign or landing page we operate for that client. In that case the client is the responsible party and their privacy policy applies.
• Professional advisers — accountants, auditors, insurers and lawyers — where necessary.
• Regulators, courts and law enforcement, where we are required to do so by law or where it is necessary to establish or defend a legal claim.
• A buyer or successor, if we sell or restructure the business, subject to the same protections set out here.

We do not sell personal information.

10. Sending information outside South Africa

Some of the platforms and suppliers we use are based outside South Africa, including in the European Union, the United Kingdom and the United States. That means your personal information may be transferred, stored or processed outside the country.

We only make such transfers where section 72 of POPIA allows it — that is, where the recipient is subject to a law, binding corporate rules or a binding agreement giving substantially similar protection, where you have consented, or where the transfer is necessary to perform a contract with you. For transfers out of the EEA or the UK, we rely on adequacy decisions or on the European Commission’s Standard Contractual Clauses (with the UK Addendum where relevant), together with any additional safeguards required.

You can ask us for details of the safeguards applying to a particular transfer.

11. How long we keep it

We keep personal information only for as long as we need it for the purpose we collected it for, and then for as long as we are required to keep it by law.

• Enquiries that do not become work: [24 months] from last contact
• Client records, contracts and campaign material: for the duration of the relationship and [7 years] thereafter
• Accounting and tax records: 5 years from the end of the relevant tax period, as required by the Tax Administration Act 28 of 2011, and 7 years for company records under the Companies Act 71 of 2008
• Marketing contacts: until you unsubscribe or object, and then a suppression record indefinitely so we do not contact you again
• Unsuccessful job applications: [12 months], unless you ask us to keep them longer
• Website analytics: as set by the relevant platform, typically [14 months]

When information is no longer needed we delete it or de-identify it permanently.

12. Security

We take appropriate, reasonable technical and organisational measures to protect personal information against loss, damage and unlawful access, as required by section 19 of POPIA and Article 32 of the GDPR. These include access controls, multi-factor authentication, encryption in transit, reputable cloud providers, confidentiality obligations on suppliers, and restricting access to those who need it. Suppliers never receive client login details.

No system is completely secure. If a security compromise occurs affecting your personal information, we will notify the Information Regulator and, where required, you — as soon as reasonably possible after becoming aware of it, and in line with section 22 of POPIA and Articles 33 and 34 of the GDPR.

13. Your rights

Subject to the conditions and exceptions in the applicable law, you have the right to:

• Be told what personal information we hold about you and ask for a copy of it
• Correct or complete information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained
• Ask us to delete or destroy information we are no longer entitled to keep
• Object to processing based on legitimate interests, on reasonable grounds relating to your situation
• Object at any time to processing for direct marketing purposes
• Withdraw consent where processing is based on consent, without affecting processing already carried out
• Complain to the Information Regulator or, if you are in the EEA or UK, to your local supervisory authority

If the GDPR applies to our processing of your information, you additionally have the right to restrict processing, the right to data portability, and the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not carry out that kind of automated decision-making or profiling.

14. How to exercise your rights

Email jonno@hollywood.capetown or write to us at 19 Muswell Hill Road, Mowbray, Cape Town, 7700.

We will respond within a reasonable time and, where GDPR applies, within one month, which may be extended by a further two months for complex requests. There is no charge for a straightforward request, although POPIA allows a prescribed fee for access to records. We may ask you for proof of identity before acting.

For POPIA requests to access, correct or delete personal information, the prescribed forms are available from the Information Regulator’s website at inforegulator.org.za.

15. Access to records (PAIA)

Our manual under the Promotion of Access to Information Act 2 of 2000 is available on request from jonno@hollywood.capetown [or at: insert link].

16. Complaints

Please raise any concern with us first — email jonno@hollywood.capetown and we will try to resolve it.

You may also complain directly to:

The Information Regulator (South Africa) Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191 POPIA complaints: POPIAComplaints@inforegulator.org.za PAIA complaints: PAIAComplaints@inforegulator.org.za Website: inforegulator.org.za

If you are in the EEA or the UK, you may complain to the data protection supervisory authority in your country of residence, place of work, or where the alleged infringement occurred.

17. Changes to this policy

We may update this policy from time to time. The current version will always be on this page with the date it was last updated. Where changes are material, we will take reasonable steps to bring them to your attention.