Who is responsible
| Responsible party | Naledi Art Studio |
|---|---|
| Address | 39 Station Drive, Greyville, Durban, KwaZulu-Natal |
| Information officer | Naledi Zondi |
| naledi@nalediart.com | |
| Phone | 065 838 1532 |
Under POPIA the head of a private body is its information officer by default. Naledi Zondi holds that role here, and is the person to contact about anything on this page.
What we collect
Only what a booking needs, and only what you type in yourself:
| Your name | So we know whose booking it is and how to greet you. |
|---|---|
| Mobile number | To confirm the booking and to reach you quickly if something about your date changes. You may give a number or an email; you do not have to give both. |
| Email address | The same purpose as the number, and for anything worth putting in writing. |
| What you are shooting | Optional. It helps the studio have the right things in the room before you arrive. |
| Your booking | The service, date and time you chose, the amount quoted, and your booking reference. |
We do not ask for an identity number, an address, or any payment card details, and you should not send them through this site. Deposits and payments are arranged with the studio directly.
The site sets no advertising or tracking cookies and runs no third-party analytics. Your browser may store which images you have opened, on your own device only.
Why we hold it, and on what basis
To carry out your booking
Confirming the slot, holding the date, letting you know if anything moves, and having a record of what was agreed. POPIA allows this because it is necessary to carry out the contract between you and the studio.
To keep our own records
A booking history is how the studio knows what happened on a date, settles a query about an amount, and meets its obligations under tax and company law.
To tell you what is happening at the studio
News, new services, a change to prices or hours, and offers. This one is separate, and it only happens if you tick the box asking for it. POPIA treats direct marketing by electronic means as needing your consent, so that box is never ticked for you, and saying no does not affect your booking in any way.
Photographs and video made here
The studio keeps the right to use photographs and video made in the space in its own marketing: on this website, on social media, and in print. This is how a studio shows what it can do, and it is stated on the booking form before you confirm.
You can say no. Tick Do not publish anything from my booking on the form and nothing from your session is used. It is recorded against your booking, so nobody has to remember a conversation on the day. You may also change your mind later: email the studio and the work comes down.
Where an image identifies you, POPIA treats it as your personal information, and the opt-out above is how you exercise that. A shoot you have booked for someone else, a child for instance, is decided by whoever made the booking.
Who else sees it
- Supabase stores the booking database on the studio's behalf, as an operator under POPIA. The studio's own staff reach it through a password-protected dashboard.
- Netlify and GitHub serve the pages of this site. They see the ordinary request information any web host sees, such as your IP address.
- Nobody else. We do not sell your information, we do not rent it, and we do not hand it to anyone for their own marketing.
Some of these services keep data on servers outside South Africa. POPIA allows this where the receiving country or the contract gives comparable protection, which is the basis we rely on.
How long we keep it
| A booking that went ahead | Five years from the date, which is the period the tax and company rules expect records to be available for. |
|---|---|
| A request never confirmed | Released automatically after 48 hours, and cleared from the records in the ordinary course. |
| Your marketing consent | Until you withdraw it. The record that you withdrew is kept, so that we do not contact you again by mistake. |
Your rights
POPIA gives you the following, and the studio will act on any of them free of charge:
- To be told what we hold about you, and to be given a copy.
- To have it corrected if it is wrong, or deleted if we no longer have a reason to keep it.
- To object to us using it, on grounds relating to your situation.
- To withdraw your consent to updates at any moment, without giving a reason. Reply to any message with the word STOP, or email the studio, and it ends there.
- To complain to the Information Regulator if you think the studio has got this wrong.
Email naledi@nalediart.com or call 065 838 1532. We will come back to you within a reasonable time, and within 30 days at the outside.
The Information Regulator
| Office | The Information Regulator (South Africa) |
|---|---|
| Address | JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 |
| Complaints | POPIAComplaints@inforegulator.org.za |
| General | enquiries@inforegulator.org.za |
| Website | inforegulator.org.za |
Keeping it safe
The booking database cannot be read with the key this website carries: that key may add a booking and ask which times are already taken, and nothing else. Reading bookings needs a signed-in studio account, and the dashboard is not indexed by search engines. Everything travels over an encrypted connection.
If personal information here were ever accessed by someone who should not have it, POPIA requires the studio to tell both the Information Regulator and you, as soon as reasonably possible. The studio will do that.
Children
A booking made for someone under 18 should be made by their parent or guardian, who is the person the studio will deal with.
Changes to this notice
If what the studio does with your information changes, this page changes with it, and the date below moves. Where the change is significant, and you have asked to hear from us, we will say so directly.
Last updated 30 September 2026.