PRIVACY POLICY
Last updated: 01 June 2026
This policy explains how Tracy Marshall Design ("we," "us," "our") collects and uses information from people who visit our website, fill in our enquiry form, sign up for our newsletter, book a discovery call, or work with us as clients.
By using our website or contacting us, you agree to this policy. If you don't agree, please don't use the site or share your information with us.
Who we are
Tracy Marshall Design is a brand and web design studio based in South Africa. Tracy Marshall is the responsible party for the data we collect, as defined under the South African Protection of Personal Information Act (POPIA).
You can contact us at any time about your data by emailing support@tracymarshall.net.
What we collect
We collect the following kinds of information:
Information you give us directly: your name, email address, phone number, business name, website URL, social media handles, and anything else you share in our enquiry form, on a discovery call, or through email.
Information you give us as a client: project details, brand information, files, payment information, and anything else needed to deliver the work.
Information collected automatically: when you visit our site, we use cookies and analytics tools to track basic usage data like the pages you visit, how long you stay, and what device you're using. This helps us understand what's working on the site and what needs improvement.
Newsletter sign-ups: if you subscribe to our newsletter, we collect your email address and your name if you provide it.
How we use your information
We use your information to:
Respond to your enquiries and answer your questions
Schedule and conduct discovery calls
Send proposals, contracts, and invoices
Deliver the brand or web design work you've hired us for
Send you our newsletter (only if you've signed up for it)
Improve our website and services
Comply with legal and tax obligations
We don't use your information for anything else without asking you first.
Who we share your information with
We don't sell your information. Ever.
We share your information only with the people and tools we need to run the business properly:
Payment processors like PayPal, to handle invoices and deposits
Booking tools like Cal.com, to schedule discovery calls
Email tools like our newsletter platform, to send you our newsletter (if you've signed up)
Website tools like Squarespace, which hosts our site and processes enquiry forms
Our developer Shaun Billinge, if your project involves a WordPress build
Legal or tax professionals, if needed to meet our legal obligations
Each of these tools has its own privacy practices. We choose tools that meet reasonable data protection standards.
How long we keep your information
We keep your information for as long as we need it to do the work, run the business, and meet legal obligations.
Specifically:
Enquiry form submissions: kept for two years, then deleted unless you become a client
Client information and project files: kept for the duration of the project and for five years after, for legal and tax reasons
Newsletter subscribers: kept until you unsubscribe
If you'd like us to delete your information sooner, email us and we'll do it where legally possible.
Your rights
Under POPIA and GDPR, you have the right to:
Ask what information we hold about you
Ask us to correct information that's wrong
Ask us to delete your information (where legally possible)
Ask us to stop sending you marketing emails at any time
Object to how we're using your information
Lodge a complaint with the South African Information Regulator (if you're based in South Africa) or your local data protection authority (if you're based elsewhere)
To use any of these rights, email us at support@tracymarshall.net.
Cookies
Our website uses cookies. Cookies are small files saved to your device that help the site work properly and help us understand how people use it.
We use:
Essential cookies for the site to function (these can't be turned off)
Analytics cookies to track basic usage (these help us improve the site)
Functional cookies for things like remembering your preferences
You can turn off cookies in your browser settings, but parts of the site may not work as expected if you do.
How we protect your information
We use industry-standard practices to keep your information safe. This includes secure hosting, encrypted payment processing, and limiting access to your data to only the people who need it to do the work.
No system is ever 100% secure. If a data breach happens that affects your information, we'll let you know and tell you what we're doing about it.
International transfers
We're based in South Africa, but we use tools and platforms that store data in other countries, including the United States and the European Union. By using our site or sharing your information with us, you understand that your data may be processed outside South Africa.
We only work with providers that meet reasonable data protection standards.
Children
Our website and services are not intended for anyone under 18. We don't knowingly collect information from children. If you believe a child has shared information with us, please email us and we'll delete it.
Changes to this policy
We may update this policy from time to time. When we do, we'll change the "last updated" date at the top. Big changes will be flagged on the site so you can review them.
Contact us
For any questions about this policy or your data, email support@tracymarshall.net.