Last updated 1 October 2026

Privacy & POPIA Policy

This policy explains how Spirit2k5 Web Studio handles personal information when you browse the website, request a free website check, send an enquiry, communicate about a project or become a client.

Who is responsible for your information

Spirit2k5 Web Studio is operated by Carlton Mahlori Tshianeo. Contact: mahloricarlton@gmail.com, 078 188 8220. Public business address: 29 Thupa, Meadowlands, Soweto, 1853, South Africa.

Information you may provide

This can include your name, business or brand name, email address, phone or WhatsApp number, website address, budget range, timeline, project requirements, files or content you choose to share, and messages related to your enquiry or project.

Enquiry backup and lead records

When you submit the project enquiry form, Spirit2k5 may securely store the enquiry in its Supabase-backed lead database in addition to attempting email delivery. This redundancy is used so an enquiry is less likely to be lost if an email-delivery service fails. The record can include the details you entered, the page you submitted from, referral information and campaign parameters where present.

First-party website measurement

The site records limited first-party interaction events so Spirit2k5 can understand which pages and contact paths are useful. These events can include page views, Start Project clicks, WhatsApp clicks, pricing or portfolio clicks, free website check clicks, project-form progress, AI assistant opens or response-layer events, and enquiry outcomes. Conversion analytics do not store the text of an AI question. The event record may include the page path, referring page, campaign parameters, a temporary session identifier and browser user-agent information. Spirit2k5 does not use this first-party measurement to create advertising profiles.

Why the information is used

Information is used to respond to enquiries, prepare or discuss quotes, provide requested services, understand which pages generate useful enquiries, communicate about revisions and launch, provide support, prevent abuse of forms, and keep reasonable business records connected to the work.

POPIA approach

Spirit2k5 aims to process personal information only for a specific and legitimate business purpose, keep it reasonably accurate, protect it against unauthorised access, and retain it only for as long as it is reasonably needed or legally required.

First-party enquiry and conversion records

Spirit2k5 uses its own secure system to keep a record of website enquiries and basic conversion events such as page views, Start Project clicks, WhatsApp clicks, pricing views and successful enquiry submissions. This helps Spirit2k5 understand which pages and contact routes are useful. The tracking does not intentionally collect card details, passwords or advertising-profile data. Enquiry records can include the information you submit in the form, while conversion records use limited technical context such as the page visited, referral source, campaign tags and a temporary session identifier.

Infrastructure used for these records

These first-party records are stored using Supabase infrastructure for Spirit2k5. Public website visitors are not given direct database access; the website sends allowed enquiry and conversion events through a restricted server-side endpoint.

Project enquiry forms

The form currently uses FormSubmit as one delivery route and Spirit2k5's Supabase-backed lead store as a backup record. If electronic delivery fails, the website may offer WhatsApp as an immediate backup. You can also contact Spirit2k5 directly by email, phone or WhatsApp without using the form.

AI Customer Assistant

When you use the Spirit2k5 Customer Assistant, your question and the answer provided may be stored so repeated questions can be answered more efficiently and the service can be improved. The record may also include the relevant website source, confidence information, timestamps, how often a similar question was asked and a temporary session identifier.

The assistant checks approved Spirit2k5 website information first. If the website information cannot answer a question confidently, limited approved context and the question may be sent to Google's Gemini API to generate a fallback response. When the Gemini API Free Tier is used, Google states that submitted content may be used to improve its products. Spirit2k5 does not publish new prices, guarantees, refund rules, payment terms or other important business promises just because an AI response said them; those items require approval before they can become reusable knowledge. Do not send passwords, card details or other highly sensitive information through the assistant.

Third-party services

Information may be processed through services used to deliver the website or a project, such as Supabase, FormSubmit, email, WhatsApp, website hosting, domain providers, WordPress, payment providers or other project platforms where relevant. Only information reasonably needed for the service should be shared.

Cookies and browser storage

The current Spirit2k5 website does not intentionally use advertising cookies. It may use temporary browser session storage to assign a non-advertising session identifier for first-party measurement and normal browser or hosting functions may process technical information needed to load and protect the website. See the Cookie Notice.

Your choices and rights

You may ask what personal information Spirit2k5 holds about you, request correction of inaccurate information, object to certain processing where applicable, or request deletion of information that no longer needs to be kept. Legal and business record-keeping requirements may limit deletion in some cases.

Complaints

If a privacy concern cannot be resolved directly, you may also contact South Africa's Information Regulator. See inforegulator.org.za.

Contact

Email mahloricarlton@gmail.com or phone/WhatsApp 078 188 8220.