Updated 30/10/2026

Privacy Policy (POPIA Compliant)

1. Introduction and Responsible Party

The Protection of Personal Information Act (POPIA) establishes how organisations must collect, use, store and protect personal information about South African residents. For the purposes of this legislation, A1 STUDIOS (Registration: 2025/844990/07), operating via a1studios.org, acts as the Responsible Party.

2. Information Officer

POPIA requires the designation of an Information Officer to ensure compliance and handle privacy-related requests.

• Information Officer: Wasim Morris

• Physical Address: Available on request from info@a1studios.org

• Contact Email: info@a1studios.org

3. Personal Information We Collect

We only collect what we actually need. "Personal information" under POPIA is very broadly defined. We may collect:

• Names, email addresses, phone numbers and physical addresses.

• IP addresses and device identifiers (collected by analytics tools and cookies).

• Billing, invoicing, and payment-related information.

• Visual identifiers and likenesses captured within video footage and photography: This data is processed strictly for the performance of our production contracts and is governed by the specific talent release forms and location filming notices secured for each project.

4. How We Collect Your Information

Personal data is collected through various operational touchpoints, including:

• Website Forms: Contact forms capturing your name, email, phone, and message content.

• Cookies and Analytics: Background analytics that collect IP addresses, device type, browser, pages visited and session duration.

• Direct Engagement: Client onboarding processes.

5. Purpose of Processing

POPIA mandates that data must be processed for a specific, defined purpose. We utilize your data to:

• Execute our research-informed, data-led video production services.

• Facilitate billing, invoicing, and contract performance.

• Maintain website functionality and monitor usage patterns.

6. Disclosure and Third-Party Operators

We may share personal information with trusted third-party operators where necessary to deliver our services, including hosting and infrastructure providers, email platforms, and payment processors. All operators are required to process personal information securely and confidentially. Some of these operators store information on servers outside South Africa, including in the European Union and the United States. These transfers are made in line with section 72 of POPIA, for example where they are needed to respond to your enquiry or to carry out our agreement with you.

7. Information Security

We implement reasonable technical and organisational security measures to protect the integrity and confidentiality of personal information. This includes secure hosting environments, secure communications, and strict access controls to unreleased project files and raw footage.

8. Data Retention

Personal information will be retained only for as long as required to fulfill the original purposes for which it was collected. Client project files and raw footage are retained for 3 years post-completion for portfolio and archival purposes, while financial and billing records are retained for 7 years as legally mandated. Once these retention periods expire, data will be securely destroyed or permanently de-identified.

9. Data Subject Rights

Under POPIA, data subjects possess the right to participate in how their data is handled. You have the right to:

• Request access to the personal information we hold.

• Request correction or updating of inaccurate information.

• Object to the processing of your personal information, and withdraw your consent at any time.

• Request deletion of personal information, subject to legal or contractual requirements. Requests can be submitted in writing to info@a1studios.org. We will provide access to personal information within a reasonable time.

If you are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the Information Regulator: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191. Email POPIAComplaints@inforegulator.org.za or enquiries@inforegulator.org.za. Website https://inforegulator.org.za.

10. Breach Notification

If personal data is compromised, we must notify the Information Regulator and affected individuals. In the event of a security compromise or data breach, we will notify the Information Regulator and all affected individuals as soon as reasonably possible, and within 72 hours where required by applicable international data protection laws, detailing the nature of the breach and protective measures to be taken.