Privacy Policy

MDA — Modern Digital Agency ("MDA", "we", "us") is a digital growth agency registered and operating in South Africa. We build websites, custom CRMs, automation, and lead-generation systems for businesses across South Africa and abroad.

For the purposes of the Protection of Personal Information Act, 2013 (POPIA), MDA is the "Responsible Party" for the personal information we process as described in this policy. Our Information Officer can be reached using the contact details at the end of this page.

We only collect personal information that is necessary to provide our services and respond to your enquiries. This may include:

• Contact details — full name, email address, phone number, and business name.
• Business context — your current website URL, industry, services you're interested in, and a short description of your biggest challenge.
• Booking details — preferred dates and times when you book a strategy call.
• Communication records — messages you send us via our forms, WhatsApp, email, or the Nova growth advisor widget.
• Technical data — basic device and usage information collected through analytics, such as pages visited and approximate location.

We process your personal information for the following purposes:

• To respond to your enquiry and provide the service you requested.
• To schedule and conduct strategy and discovery calls.
• To prepare proposals, quotes, and custom recommendations for your business.
• To deliver and support the digital systems we build for you.
• To send you relevant updates about your project or services you've engaged us for.
• To improve our website, services, and client experience.
• To comply with our legal and regulatory obligations.

Under POPIA, we process your personal information on the following lawful bases: your consent (when you submit a form or start a chat); the necessity of processing to conclude or perform a contract with you; compliance with a legal obligation; and our legitimate interests as a business in responding to enquiries, delivering services, and improving what we offer.

We do not sell your personal information. We may share it only with trusted service providers who help us operate — for example hosting, email delivery, analytics, and scheduling tools — under written agreements that require them to protect your data and use it only as we instruct. We may also disclose information where required by law.

We keep your personal information only for as long as necessary to fulfil the purpose for which it was collected — typically for the duration of our business relationship and a reasonable period afterwards for record-keeping and legal compliance. After that it is deleted or anonymised.

We take appropriate technical and organisational measures to protect your personal information against loss, misuse, and unauthorised access. Access is restricted to authorised personnel who need it to do their work, and our systems are hosted on platforms with strong security controls.

Our website uses basic analytics to understand how visitors use the site so we can improve it. This data is generally aggregated and does not identify you personally. You can control or disable cookies through your browser settings.

You have the right to:

• Access the personal information we hold about you.
• Ask us to correct inaccurate or outdated information.
• Request the deletion of your personal information, subject to legal retention obligations.
• Object to or restrict the processing of your information.
• Withdraw your consent at any time (processing that relied on it will then stop).
• Lodge a complaint with the Information Regulator if you believe your rights have been infringed.

To exercise any of these rights, contact us using the details below.

We only send marketing communications to people who have requested them or with whom we have an existing relationship. You can unsubscribe at any time using the link in any email or by asking us directly.

Our services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we will delete it.

We may update this policy from time to time. The latest version will always be posted on this page with the updated date shown above.