Your information, handled with care.

Who we are

Taek Two is a film and photography studio in Midrand, Pretoria, run by Jae. We are a venture of Mirembe Muse (Pty) Ltd. The Responsible Party for your information is Taek Two Studios & Media (company registration number [to confirm: registration number]).

Information Officer: [to confirm: name of Information Officer]. Address for requests: [to confirm: registered address].

To reach us, email taektwoprojectsandmedia@gmail.com or WhatsApp 081 805 6659.

What we collect, and why

• Your brief. Name, email, phone, company (optional), what you want filmed, goals, audience, date, location, budget and the packages you picked. We use it to prepare a treatment and quote and to follow up. Lawful basis: it is needed to take steps towards a contract with you, and you consent when you tick the POPIA box.
• Anyone under 18. If you say a child will be filmed, we also keep the parent or guardian's name and their consent. We will not show anyone under 18 publicly without written guardian consent.
• Chat helper. The website helper is an AI, not a person. Your messages go to Workers AI to write an answer. We do not store the conversation text; it stays in your browser tab and clears when you close it. We keep only anonymous counts, such as how many chats happened and which general topics came up. If you send a brief from the chat, the chat summary is saved only if you tick a separate consent box. Please do not type ID numbers or card details into the chat.
• Orders and payments. Name, email, what you ordered and the amount. Card details go straight to PayFast and never touch our site. Lawful basis: performing the contract, and our legal duty to keep financial records.
• Simple site activity. Our own system records which pages and buttons are used, with a random session code, and where you came from (for example a campaign link). It sets no cookies and is linked to you only if you send a brief. Lawful basis: our legitimate interest in seeing what helps people book.
• Marketing. We send updates only if you ticked the marketing box. You can say stop at any time.
• Messages you send us by email or WhatsApp, so we can reply.

We never sell your information or use it for third-party ads.

Who helps us handle it

These providers process information for us, under their own security terms. We share only what each one needs.

Supabase

Our database. Stores briefs, leads, orders and first-party page events.

Cloudflare

Hosts the website (Workers), stores files (R2), protects forms and the chat helper (Turnstile), and runs the AI helper (Workers AI). Cloudflare does not train its models on what you type.

PayFast

Takes payments. You enter card details on PayFast, never on our site.

Resend

Sends our emails, such as brief notifications and quotes.

Sentry

Error monitoring. We switch off request bodies, cookies, headers and user details, so it only sees technical error information.

PostHog and Google Analytics

Website analytics. Loaded only if you tap Allow on the cookie choice.

We may also share information where the law requires it.

Sending information outside South Africa

Some of these providers store or process information in other countries, for example PostHog (United States) and Google Analytics if you allow analytics, and the global networks of Cloudflare, Supabase, Resend and Sentry. We use providers with recognised security practices and agreements that protect your information, as POPIA section 72 requires. Specific data regions: [to confirm: confirm Supabase and Resend regions].

How long we keep it

We keep information only as long as we need it for the purposes above, or as the law requires.

• Briefs and enquiries: [to confirm: period]
• Orders and invoices (tax and accounting records): [to confirm: period]
• Site activity events: [to confirm: period]
• Chat conversations: not stored. Chat usage counts carry no message text.
• Error logs: [to confirm: period]

When we delete a record it is removed from view straight away and cleared in our regular clean-up.

How we protect it

Connections use HTTPS. Our database limits who can see what, and only the studio's admin account can open client records. Forms and the chat helper are rate-limited and checked against bots. Private files sit in encrypted storage that has no public address. Payment details are handled by PayFast. No system is perfectly safe, but if a breach affects you we will tell you and the Information Regulator, as POPIA requires.

Your rights

Under POPIA you can:

• Ask what personal information we hold about you and get a copy.
• Ask us to correct information that is wrong or out of date.
• Ask us to delete information we no longer need, or have no right to keep.
• Object to us using your information, including for marketing. You can also withdraw consent at any time.
• Complain to the Information Regulator.

To use any of these, email or WhatsApp us (details above) and tell us what you need. We may ask you to confirm who you are first.

Not happy with how we handled it? You can complain to the Information Regulator at inforegulator.org.za. We would appreciate the chance to put it right first.

Cookies and analytics

Analytics cookies from Google Analytics and PostHog load only after you tap Allow on the cookie choice. If you tap No thanks, they never load. PostHog session recording is switched off. Your choice is kept on your device, and you can clear it in your browser settings to be asked again. Our own page counts, described above, use no cookies.

Children

Our website is for adults. We collect information about a child only when a parent or guardian includes them in a brief for a shoot, and then only with that adult's consent.

Changes to this notice

If we change how we handle your information, we will update this page and the date. Last updated: 20 October 2026.