Skip to main content
    Memories Made in Motion

    Legal

    Privacy Policy & POPIA Notice

    Version v2.0 · Last updated: 17 August 2026 (previous version: 12 August 2026)

    1. Introduction

    Memories Made in Motion respects your privacy and is committed to protecting your personal data in accordance with the Protection of Personal Information Act (POPIA) of South Africa.

    The responsible party for the personal information described here, as defined in section 1 of POPIA, is:

    • Memories Made in Motion (Pty) Ltd (registration number 2022/850950/07)
    • 48 5th Street, Wynberg, Sandton, 2090
    • admin@memoriesmotion.com · +27 61 518 1374

    2. Information We Collect

    We may collect personal information such as full names, company names, contact details (email/phone), event details/locations, guest lists (if operationally required), and billing information.

    When you browse the site we also record a limited set of technical information for our own page statistics: the pages you view, the page that referred you, a random session ID held only for the duration of your browser tab, your approximate country and city looked up from your IP address (which we do not store with the page-view record), your browser and operating system family, and your viewport size rounded to the nearest 10 pixels. We deliberately do not collect high-entropy device signals such as CPU architecture, device model or full browser version lists, because we do not need them and they would make you easier to fingerprint.

    If you allow precise location when asked, your GPS coordinates are stored in your own browser only, to suggest your nearest service area. They are never transmitted to or stored on our servers, and switching the setting off in Cookie Settings erases them.

    We do not knowingly collect personal information from children under 18 without the consent of a competent person, and we do not carry out automated decision-making that has legal consequences for you (POPIA s71).

    3. Legal Basis for Processing

    We process personal information where necessary to respond to inquiries, prepare quotations, perform contracts, comply with legal/accounting duties, protect legitimate business interests, and where consent is required.

    4. Retention

    We retain personal information only for as long as necessary for the purpose collected, and we apply the periods below:

    • Website page statistics and performance metrics: 12 months, then deleted.
    • Quote and enquiry funnel telemetry: 12 months, then deleted.
    • AI concierge chat transcripts: 12 months, then deleted.
    • Enquiries and quotations that do not become bookings: up to 24 months, so we can pick up the conversation if you return.
    • Marketing subscribers: until you unsubscribe, plus a suppression record so we do not email you again by mistake.
    • Contracts, invoices and accounting records: 5 years from the end of the relevant tax year, as required by the Companies Act and the Tax Administration Act.

    5. Operators / Third Parties

    We use a small number of trusted service providers (operators under POPIA) who process personal information only on our instructions and only as needed to run our business. We do not sell or trade your data. Our main digital operators are:

    • Payments: Paystack processes card and EFT payments securely. We never see or store your full card number.
    • Website infrastructure: our site database, forms and secure file storage run on Supabase; the website is hosted and delivered via our hosting provider's content delivery network (Cloudflare).
    • Analytics and advertising: Google Analytics 4, Meta Pixel and PostHog help us understand how the site is used and measure our marketing. These load only if you accept analytics/marketing cookies in our cookie banner.
    • Form protection: Cloudflare Turnstile checks that form submissions come from humans, not bots.
    • AI concierge: messages you type into our website chat assistant are processed by an AI service provider to generate replies. Please don't share sensitive personal information in the chat.
    • Business operations: accounting software (e.g., Sage), banks, couriers/logistics, vetted event suppliers and professional advisers, where needed to deliver our services.

    Each operator is bound by contract and/or law to keep personal information confidential and secure.

    6. Cross-Border Processing

    Some of the providers above (for example Google, Meta, Paystack, Supabase and our hosting provider) store or process information on servers located outside South Africa. Where that happens, we rely on section 72 of POPIA: the recipient is subject to laws, binding corporate rules or contract terms that provide substantially similar protection to POPIA, or the transfer is necessary for the performance of a contract with you or steps you have requested before entering one.

    We take reasonable steps to ensure your personal information remains protected to the standard required by POPIA wherever it is processed.

    7. Security Incidents

    If we become aware of a security compromise affecting personal information, we will take reasonable steps required by POPIA, including notification where applicable.

    8. Your Rights & Complaints

    Under POPIA you have the right to:

    • be told what personal information we hold about you and request a copy of it (s23);
    • have inaccurate, irrelevant, excessive or out-of-date information corrected, or have it deleted or destroyed (s24);
    • object, on reasonable grounds, to our processing of your information (s11(3)(a));
    • withdraw any consent you have given, at any time — including cookie and marketing consent — without affecting processing that lawfully happened before you withdrew (s11(3)(b));
    • object at any time to direct marketing, free of charge (s11(3) and s69);
    • not be subject to a decision based solely on automated processing that has legal consequences for you (s71);
    • submit a complaint to the Information Regulator (s74); and
    • institute civil proceedings regarding an alleged interference with your information (s99).

    You can withdraw cookie or analytics consent instantly using the Cookie Settings link in the footer, and stop marketing email via the unsubscribe link in any message or at /unsubscribe.

    Official POPIA forms for objection, correction, and complaints can be found on the Information Regulator POPIA Forms Page.

    The fastest way to exercise your rights with us is to submit a POPIA request — we’ll respond within 30 days. You can also email admin@memoriesmotion.com.

    9. Information Officer Details

    If you are not satisfied with how we handle your request, you may lodge a complaint with the regulator:

    10. Cookies & Tracking

    Strictly necessary cookies and our own cookie-free page counter run on every visit. Third-party analytics and marketing technologies (Google Analytics 4, PostHog, Meta Pixel) load only if you accept those categories. Full detail, including a table of every cookie and its retention period, is in our Cookie Policy.

    11. Changes to This Notice

    This is version v2.0, effective 17 August 2026. When we make material changes we publish the new version here with a new version number and effective date, and where the change affects processing that relies on your consent we will ask for that consent again.