This site is run by one person and collects as little as it can get away with. There is no advertising network, no data broker, and no profile being built about you. This policy explains exactly what does happen, in plain language.
1. Who is responsible
Angel Maile, trading as an independent design and engineering practice from Cape Town, South Africa, is the responsible party (in POPIA terms) and the data controller (in GDPR terms) for information collected through angelmaile.com.
Questions about this policy, or any request relating to your information, can be sent to info@angelmaile.com. Requests are answered within one business day and resolved within thirty days at the outside.
2. What is collected
Only two things are collected through this website, and both require you to actively submit them:
- Enquiry details: the name, email address, company, budget range, timeline and message you type into the contact form. The form composes an email in your own mail client; nothing is stored on a server before you press send there.
- Newsletter subscriptions: the email address you supply, and the date you supplied it, held solely to send the monthly note.
- Aggregate analytics: privacy-preserving page-view counts with no cookies, no cross-site identifiers and no individual profiles. This tells me which pages are read; it cannot tell me who read them.
3. What is deliberately not collected
- No advertising or tracking cookies of any kind.
- No third-party marketing pixels, social widgets or session recording.
- No fingerprinting, cross-site tracking or data enrichment from external sources.
- No sale, rental or sharing of your information with anyone, ever, under any circumstances.
4. Why it is collected, and on what basis
Enquiry details are processed to reply to you and, if we go on to work together, to prepare a proposal. The lawful basis is your consent, given when you tick the consent box, and thereafter the legitimate interest of responding to a request you initiated.
Newsletter addresses are processed on the basis of your consent alone. Every email carries a one-click unsubscribe link, and unsubscribing removes the address rather than merely flagging it.
Aggregate analytics are processed on the basis of legitimate interest in understanding which pages are useful. Because the data is anonymous and unlinkable, it cannot identify you.
5. How long it is kept
- Enquiries that do not become projects: deleted within twelve months.
- Enquiries that become projects: kept for the duration of the engagement plus five years, as South African tax and contract record-keeping requires.
- Newsletter addresses: kept until you unsubscribe, then deleted within thirty days.
- Analytics: aggregate counts only, retained for twenty-four months and never linked to an individual.
7. International transfers
Some providers operate infrastructure outside South Africa, principally in the European Union and the United States. Where information leaves South Africa it is transferred under standard contractual clauses or an equivalent safeguard recognised under POPIA section 72 and GDPR Chapter V.
8. Your rights
Under POPIA and, where it applies to you, the GDPR, you may exercise any of the following at no cost:
- Access: ask what information is held about you and receive a copy.
- Correction: have inaccurate or incomplete information corrected.
- Deletion: have your information erased where there is no legal obligation to keep it.
- Objection: object to processing based on legitimate interest.
- Portability: receive your information in a structured, machine-readable format.
- Withdrawal: withdraw consent at any time, without affecting processing already carried out.
9. Complaints
Please raise any concern with me first at info@angelmaile.com. Most issues are a misunderstanding and are resolved the same day.
If you remain unsatisfied, you may lodge a complaint with the Information Regulator of South Africa (inforegulator.org.za) or, if you are in the European Union or United Kingdom, with your local supervisory authority.
10. Security
The site is served exclusively over TLS. Accounts holding client correspondence use multi-factor authentication and hardware-backed keys. Access is limited to me alone.
No system is perfect. In the event of a breach affecting your information, you and the Information Regulator will be notified as soon as reasonably possible, with a description of what happened and what is being done about it.
11. Changes to this policy
This policy was last updated on 1 July 2026. Material changes are announced on this page with a revised date, and anyone subscribed to the newsletter is told directly. Continued use of the site after a change constitutes acceptance of the revised policy.
This document forms part of the terms on which Angel Maile operates angelmaile.com. It is written to be understood rather than to be impenetrable, and it is reviewed at least annually. If any provision is found unenforceable, the remainder continues in force.