Legal
Privacy notice
How Hello Brand collects, uses and protects personal information on this website, and how the campaigns we run on Hello Brand OS, powered by Social Wiiv, look after the people who take part. Written to meet South Africa's Protection of Personal Information Act (POPIA).
Last updated 7 October 2026.
Who we are
Hello Brand is the responsible party for personal information collected through this website and our enquiry forms. You can reach us at Woodstock Foundry, 170 Albert Road, Woodstock, Cape Town, 7915, by email at [email protected] or by phone on 021 569 7123 ext. 233. Privacy questions and requests go to our Information Officer at the same email address.
This website and enquiries
When you browse this site or send us an enquiry, Hello Brand decides what is collected and why. This notice covers that.
Campaigns on Hello Brand OS
When you join a venue's guest Wi-Fi or take part in a campaign, the platform is Social Wiiv's, and each campaign shows its own terms and privacy notice before you sign up. Social Wiiv's Privacy Policy (socialwiiv.com/Privacy-Policy.html) explains how the platform handles that information.
What we collect
What you tell us
When you use a contact or start-a-project form: your name, email address, phone number, organisation, role and website; venue details such as name, type, location and number of venues; your brief, budget range and timing; and whether you would like to hear from us about our work.
What your browser sends
Like every website, the server that hosts this site records basic technical details for each visit, such as IP address, browser type and the pages requested, to keep the site running and secure.
No tracking cookies
This site sets no cookies and runs no analytics, advertising or social media tracking. Our videos are hosted on our own site, so no video platform sees your visit. The forms keep your progress in your browser's session storage, which is cleared when you close the tab.
Taking part in a campaign
If you join a campaign in a venue, you share details on that campaign's sign-up screen, such as your cellphone number and answers to questions, after accepting its terms and confirming your age where the law requires it.
Why we use it
- To reply to your enquiry and prepare a proposal you asked for.
- To deliver work you have agreed with us.
- To send you news about our work, only if you ticked the box to say yes. You can say no at any time.
- To keep this site and our systems secure and to prevent misuse.
- To meet our legal and tax obligations.
Our lawful grounds
We process personal information with your consent, to take the steps you ask for before or under a contract, to comply with the law, or where we have a legitimate interest that does not override your rights, as section 11 of POPIA allows.
Who we share it with
We never sell personal information, and no one receives it for their own marketing. We share it only with service providers who help us run this site, our email and our platform, under written agreements that require them to keep it secure and use it only on our instructions, as POPIA requires of operators. We may also disclose information when the law requires it.
The forms on this website, such as Start a project, are delivered by Web3Forms (web3forms.com/privacy), a form delivery service. When you send a form, Web3Forms passes what you entered to our inbox by email; it acts for us and does not use your details for anything else. Web3Forms may handle this information outside South Africa, which the next paragraph covers.
Where a provider stores information outside South Africa, we use providers in countries with adequate data protection laws or bound by binding agreements, as section 72 of POPIA requires.
How the platform protects data
Hello Brand OS is powered by Social Wiiv. Social Wiiv publishes its security programme in its Trust Center (socialwiiv.com/Security-Trust.html). In summary, Social Wiiv states that:
Registered under POPIA
Its Information Officer and Deputy Information Officer are registered with the Information Regulator, with documented procedures for access, correction, deletion and objection requests.
Each client kept apart
Each client's data sits in a separate database tenant and is never used to enrich, benchmark or cross-reference another client's campaign.
Encrypted throughout
Data is encrypted in transit (TLS 1.3 with HSTS) and at rest (AES-256), with daily encrypted backups.
Hosted in South Africa
Client databases are hosted in South Africa, on Microsoft Azure, and any international data flows are covered by data processing agreements and standard contractual clauses.
Not sold, not used for ads
Client data is not sold to third parties, not used for advertising, and not shared with AI providers for training. Automated decisions are reviewed by people.
Security monitoring
Its security programme includes continuous monitoring and documented controls.
How long we keep it
We keep personal information only as long as we need it for the reason we collected it: an enquiry for as long as the conversation and any work that follows, and marketing details until you unsubscribe. Records the law requires us to keep, such as invoices, we keep for the period it sets. After that we delete the information or remove anything that identifies you.
Your rights
Under POPIA you may ask us to:
- confirm whether we hold information about you, and give you a copy;
- correct information that is wrong or out of date;
- delete information we no longer have a reason to keep;
- stop using your information, or stop marketing to you;
- withdraw a consent you gave, without affecting what was done before.
How to ask
Email our Information Officer at [email protected]. We may ask you to confirm who you are, and we will reply within 30 days. For information held on a campaign you took part in, we will pass your request to the brand or venue that ran it and to Social Wiiv where needed.
If you are not happy with our answer, you may complain to the Information Regulator (South Africa).
Good to know
Adults only
Our services are for businesses. Taking part in Hello Brand campaigns is for people aged 18 and over. We do not knowingly collect information from children.
Changes to this notice
When we change how we handle personal information, we will update this page and the date at the top.