Privacy Notice

Keno Sonic Interactive (Pty) Ltd (“Keno Sonic”, “we”, “us”, or “our”) is a digital agency registered in South Africa (Reg. No. 2026/021166/07). We are the responsible party (information officer) for personal information collected through this website.

Contact our Information Officer at: info@kenosonic.co.za

This Privacy Notice explains how we collect, use, store, and protect personal information when you visit kenosonic.co.za, submit an enquiry, or engage with our services. It is governed by the Protection of Personal Information Act 4 of 2013 (POPIA).

We may collect the following categories of personal information:

• Contact information — name, email address, phone number, and message content submitted via our contact form or questionnaire.
• Usage data — pages visited, session duration, browser type, device type, and referral source, collected via analytics cookies (only with your consent).
• Technical data — IP address and approximate geographic location derived from it (city/country level only), collected by our hosting infrastructure for security and uptime monitoring.
• Communications — email correspondence and any information you voluntarily provide when contacting us.

We do not collect sensitive personal information (special categories under POPIA).

We use your personal information only for the following purposes:

• Responding to your enquiries and providing you with requested information.
• Delivering and managing services you have engaged us to provide, and communicating updates related to your project.
• Analysing website usage to understand how visitors interact with our site and to improve its content and performance (only where analytics consent has been given).
• Complying with our legal and regulatory obligations.
• Protecting the security and integrity of our systems.

We will not use your personal information for direct marketing without your express consent, and you may withdraw consent at any time.

We process your personal information on the following grounds:

• Consent — where you have submitted an enquiry form or agreed to analytics cookies via our cookie consent banner.
• Contractual necessity — where processing is required to fulfil a service agreement with you.
• Legitimate interest — for security monitoring and fraud prevention, where our interests do not override your rights.
• Legal obligation — where we are required by law to process or retain certain information.

We retain personal information only for as long as necessary:

• Enquiry and contact data — retained for up to 3 years from last contact, after which it is securely deleted unless an ongoing business relationship requires longer retention.
• Client project data — retained for the duration of the engagement plus 5 years for legal and accounting purposes.
• Analytics data — retained in aggregated, anonymised form only; raw session data is not stored beyond 14 months.

We do not sell, rent, or trade your personal information. We may share it only with trusted third-party service providers who process data on our behalf, under strict contractual obligations:

• Supabase (database and authentication) — United States, adequacy measures in place.
• Vercel (website hosting) — United States, adequacy measures in place.
• Google Analytics (website analytics, consent-dependent) — United States.
• PostHog (product analytics, consent-dependent) — United States.
• Resend (transactional email) — United States.

We may also disclose information where required by South African law, court order, or regulatory authority.

You have the following rights regarding your personal information:

• Right of access — to request a copy of the personal information we hold about you.
• Right to correction — to request correction of inaccurate or incomplete information.
• Right to deletion — to request deletion of your personal information, subject to our legal retention obligations.
• Right to object — to object to the processing of your personal information for direct marketing or where processing is based on legitimate interest.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, submit a request online or email us at info@kenosonic.co.za. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Regulator of South Africa at inforeg.org.za.

We implement appropriate technical and organisational measures to protect your personal information against loss, misuse, and unauthorised access. These include encrypted data transmission (HTTPS), access controls, and regular security reviews. No transmission over the internet is completely secure; we cannot guarantee absolute security, but we take all reasonable steps to protect your data.

We use cookies and similar technologies on this website. For full details of the cookies we use and your choices, please read our Cookie Notice.

We may update this Privacy Notice from time to time. Material changes will be communicated via a notice on this page. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of our website after changes constitutes acceptance of the updated notice.