POPIA Compliance

POPIA gives effect to the constitutional right to privacy and sets conditions for the lawful processing of personal information. In The Creative Box (Pty) Ltd supports those conditions in how we design website forms, host systems, respond to enquiries, and work with service providers.

This page is a public compliance statement for website-related processing. It should be read together with our Privacy Policy, which describes collection practices in more detail.

The responsible party for personal information collected through www.creativebox.world is:

Where CreativeBox processes personal information on behalf of a client under a separate mandate, that client may be the responsible party for that dataset, and CreativeBox may act as an operator. Website enquiry data submitted to CreativeBox directly is generally processed by In The Creative Box (Pty) Ltd as responsible party.

For POPIA requests, privacy complaints, or security notifications related to this website, contact our Information Officer channel at:

• Email: info@creativebox.world (subject line: “POPIA / Information Officer”)
• Phone: 011 575 4929
• Mobile: 082 382 4580
• Postal / physical: 10 Trent Crescent, Bryanston, Johannesburg, Gauteng 2021, South Africa

We will route your message to the appropriate internal owner and respond within a reasonable period, subject to verification and any lawful grounds for refusal or limitation under POPIA.

Typical categories include:

• Identity & contact: name, email address, organisation, phone number (if provided)
• Correspondence: enquiry subject, message content, and follow-up communications
• Technical: IP address, device/browser metadata, pages viewed, and security logs

We do not seek special personal information through the public website. Please avoid sending identity numbers, health data, or other sensitive details unless we specifically request them under a lawful engagement.

We process website-related personal information to:

• Receive and respond to business enquiries
• Maintain and secure the website and supporting infrastructure
• Understand aggregate usage patterns to improve content and performance
• Meet legal and regulatory duties
• Establish, exercise, or defend legal claims where necessary

Processing is limited to what is adequate, relevant, and not excessive for these purposes.

• Accountability: We take responsibility for ensuring processing complies with POPIA and for overseeing operators we appoint.
• Processing limitation: We collect information for defined purposes, prefer voluntary form submission, and avoid unnecessary fields.
• Purpose specification: Purposes are described in this page and the Privacy Policy.
• Further processing limitation: We do not repurpose enquiry data for unrelated secondary uses without a lawful basis.
• Information quality: We rely on information you provide and will correct records when you notify us of errors.
• Openness: This page and the Privacy Policy explain our practices in plain language, including our registered company particulars.
• Security safeguards: We use HTTPS, access controls, and reputable hosting; see below.
• Data subject participation: You may request access, correction, deletion, or objection as described below.

We use operators (service providers) to host the website and, where configured, to support email or form delivery. Operators may only process personal information under our instructions and for agreed purposes.

Website hosting currently uses Firebase Hosting infrastructure. Where personal information is processed outside South Africa, we take reasonable steps to ensure adequate protection consistent with POPIA’s cross-border provisions.

We maintain reasonable technical and organisational safeguards appropriate to the nature of website enquiry and log data. Safeguards include encrypted transport, restricted administrative access, and monitoring for abuse.

If we have reasonable grounds to believe personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and affected data subjects as required by POPIA, and take steps to mitigate harm.

Under POPIA, you may have the right to:

• Be notified that personal information about you is being collected
• Be notified of a security compromise where required
• Request access to your personal information
• Request correction, destruction, or deletion of personal information
• Object to processing in certain circumstances
• Not be subjected to automated decision-making in ways prohibited by POPIA (not used on this website)
• Lodge a complaint with the Information Regulator

Rights are not absolute — POPIA allows refusals or limitations in defined cases (for example where disclosure would breach confidentiality owed to another person, or where information is subject to legal privilege).

Send your request to:

• Email: info@creativebox.world
• Phone: 011 575 4929 / 082 382 4580
• Write to: 10 Trent Crescent, Bryanston, Johannesburg, Gauteng 2021, South Africa

Please include:

• Your full name and contact email
• A clear description of the request (access, correction, deletion, objection, or complaint)
• Enough context for us to locate the records (for example approximate enquiry date)
• Proof of identity if we reasonably need it to prevent unauthorised disclosure

We will acknowledge receipt and respond within a reasonable time. Complex requests may take longer; we will tell you if that is the case.

If you are not satisfied with our response, you may contact the Information Regulator:

• Website: https://inforegulator.org.za
• Complaints portal and contact details are published on the Regulator’s official website

For broader detail on cookies, retention, and international hosting, see the Privacy Policy. Website use is also subject to our Terms & Conditions.

We may update this POPIA statement as our systems, operators, or legal requirements change. The “Last updated” date at the top of the page reflects the latest revision.