Privacy,in plainEnglish.

This site, https://www.auxodigital.africa, is run by Auxo Digital (Pty) Ltd, a software and AI company based in Johannesburg, South Africa. For everything described in this policy, Auxo Digital is the responsible party under POPIA and the controller under the GDPR. In short: the buck stops with us.

POPIA requires us to appoint an Information Officer, and we have. He is also your single point of contact for any GDPR data-subject request — one person, one address, no runaround.

Four things. That is the whole list.

• No advertising or tracking cookies, and no marketing pixels.
• We never sell or rent personal information. To anyone.
• No automated decision-making that has a legal or similarly significant effect on you.
• Our services are not directed at children, and we do not knowingly collect children’s information.
• The optional audio narration on some pages is a set of static sound files — playing them sends no personal data anywhere.

Under section 11 of POPIA, we process personal information with your consent (you choose to fill in the contact form), where it is necessary to take the steps you have asked us to take (answering your enquiry, preparing a proposal), and where it serves our legitimate interests (keeping the site secure and running) without overriding yours.

For visitors in the EU, EEA and UK, the matching GDPR bases are Article 6(1)(a) — consent; Article 6(1)(b) — steps taken at your request before entering into a contract; and Article 6(1)(f) — legitimate interests, namely site security, fault diagnosis and abuse prevention.

We use three service providers — operators under POPIA, processors under the GDPR — who handle data on our instructions and nothing more:

Because these providers operate from the United States, using this site involves a cross-border transfer of personal information. Section 72 of POPIA allows this where the recipient is bound by an agreement that upholds protections substantially similar to POPIA — and each of these providers is, through its standard data-protection agreement. For GDPR purposes (Chapter V), those same agreements incorporate the European Commission's Standard Contractual Clauses. We do not hand your information to anyone else, unless the law compels us to.

Contact-form submissions are kept for as long as we need them to deal with your enquiry and any business relationship that follows from it — and deleted when you ask us to. Server logs are short-lived and rotate on Vercel's standard retention schedule. Your preferences sit in your own browser until you clear them (see section 11).

Whether POPIA or the GDPR applies to you, your rights come down to the same set:

To exercise any of them, email our Information Officer at jabu@auxo.digital and tell us what you would like done. We may need to verify that you are who you say you are — that protects you, not us. We respond without undue delay, and within one month at the outside, free of charge in almost every case.

Talk to us first — email jabu@auxo.digital and we will do our best to put it right. You also have the right to lodge a complaint directly with a regulator:

If you are in the EU or EEA, you can complain to the supervisory authority in your own country — the European Data Protection Board keeps the full list at edpb.europa.eu. In the UK, that authority is the Information Commissioner's Office at ico.org.uk.

Everything moves over TLS encryption. Access to contact-form submissions is limited to the people at Auxo who need them to do their jobs. We build on reputable infrastructure providers — Vercel, Cloudflare and Resend — who maintain their own independently audited security programmes. No system on earth is perfectly secure, but we treat your information the way we would want ours treated, and if a breach ever put you at risk we would notify you and the Regulator as POPIA and the GDPR require.

The site remembers a few choices — your experience mode (light or dark cinema), your sound preference, and whether you have already seen the entry gate — using localStorage and sessionStorage. These are notes your browser keeps to itself: they are not cookies, they are never sent to Auxo or anyone else, and they contain nothing that identifies you.

To clear them, use your browser's settings to remove site data for auxodigital.africa (usually under Privacy, then “Cookies and site data”). The site will simply forget your choices and greet you like a first-time visitor.

If we change how we handle personal information, we will update this page and the effective date below. No silent edits, no surprise clauses. Meaningful changes to what we collect would be flagged clearly on this page.

Effective date: 5 July 2026