Privacy policy

Who we are

drop-b is a data and reporting business based in South Africa. For anything on this page, contact our Information Officer through our contact form.

What this site collects

Only what you send us. If you fill in the contact form we receive your name, email address, company if you give one, what you selected you are after, and your message. If you email us instead, we receive whatever is in that email.

This site uses Google Tag Manager to run Google Analytics 4, which measures how the site is used. It can set cookies.

Where the law asks for your consent, analytics stays off until you accept: in the UK, the EU and Switzerland a banner asks first, and you can change your answer at any time with “Cookie settings” in the footer. Your choice is kept in your browser. Outside those regions analytics runs by default, but advertising features (which set third-party cookies) stay off until you accept. If analytics is allowed, we also remember for the length of your visit which site or campaign link brought you here, and attach it to your enquiry so we know which ad or link led to it.

Why we hold it

To reply to you and, if it goes further, to carry out the work we agree. Nothing else. We do not sell it, rent it, or add you to a mailing list you did not ask for.

Where the law requires a stated basis, ours is legitimate interest in responding to an enquiry you initiated, and performance of a contract once there is one.

Who else touches it

The site is hosted on Netlify, and contact form submissions are processed and stored by Netlify's form handling before reaching us. Google Tag Manager runs on every page to load the analytics tag described above. Email reaches us through Google (Google Workspace). All three are processors acting on our instructions. Enquiries are not copied into any other system.

Client project data is a separate matter and is governed by the agreement we sign with that client, not by this page.

How long we keep it

Enquiries that go nowhere are deleted after six months. Where we take on work, records are kept for as long as the engagement runs plus any period we are required to keep them for tax or legal reasons.

Where it goes

Our processors may store data outside South Africa, including in the United States and the European Union. Where that happens we rely on the safeguards those providers have in place.

Your rights

You can ask us what we hold about you, ask us to correct it, ask us to delete it, or object to us holding it. Ask through our contact form and we will action it within 30 days.

If you are in South Africa and think we have handled your information badly, you can complain to the Information Regulator. If you are in the UK or EU, your equivalent supervisory authority.

Changes

If this policy changes materially we will update the date at the top of this page.