How KOR Digital handles your personal information, under POPIA (the Protection of Personal Information Act). Last updated September 2026.
KOR Digital (Kirsten Theofanous, trading as KOR Digital) is the responsible party for the personal information described here. That means we decide how and why it's used.
Our Information Officer is Kirsten Theofanous. You can reach her on WhatsApp on the number in the footer, or by post at KOR Digital, Garden Route, Western Cape, South Africa.
| Where it comes from | What we collect |
|---|---|
| Free marketing health check | Your name, business name, website or Instagram handle, email, WhatsApp number, and whether you opted in to marketing |
| WhatsApp and calls | Your name, number, and whatever you tell us in the conversation |
| Becoming a client | Contact and billing details, business details, your payment details (held by our payment provider, never by us), and access to the accounts we manage |
| This website | Nothing. We don't use analytics, advertising pixels or tracking cookies on this site. |
We only ask for what we need. We don't ask for special personal information, like health or religious information, and we'd ask you not to send it to us.
You asked us to, so we use what you sent us to do it.
Managing your accounts, reporting and billing are part of our agreement with you.
Such as keeping financial records for tax.
Only if you ticked the opt-in box or are already a client. Every message tells you how to opt out, and you can WhatsApp us "stop" at any time.
We never sell your personal information, and we don't use it for anything unrelated to why you gave it to us.
| Provider | What for |
|---|---|
| WhatsApp (Meta) | Messaging you, and receiving health check requests |
| Peach Payments | Monthly and once-off payments |
| Our website host | Running this website |
| Our accountant | Bookkeeping and tax |
Outside South Africa. Some of these providers, including Meta, store information on servers outside South Africa. We only use providers bound by data protection laws or agreements that give your information protection similar to POPIA. We'll also disclose information if the law requires it.
| Information | How long |
|---|---|
| Health check requests that don't become work | 12 months, then deleted |
| Client records, invoices and payment records | 5 years after our work ends, for tax purposes |
| Marketing list | Until you opt out |
| Access to your accounts | Removed within 14 days of our work ending |
We protect personal information with strong passwords, two-factor authentication, access limited to the people who need it, and reputable service providers. If there's a breach affecting your information, we'll tell you and the Information Regulator as POPIA requires.
To do any of these, WhatsApp our Information Officer. We'll respond within 30 days. If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Regulator at inforegulator.org.za.
This site sets no tracking or analytics cookies. If that changes, we'll update this policy and ask for your consent first.
Our services are for businesses. We don't knowingly collect information about children under 18.
We may update this policy. The latest version always lives on this page, with the date it was last updated.