1. Information we may collect
Depending on your interaction with us, we may collect:
- Names, business names, email addresses, telephone numbers and enquiry correspondence.
- Account information, authorised client contacts, project briefs, supplied content, approvals and service preferences.
- Billing details, order and invoice references, payment status and recurring-service authorisations.
- Technical information such as IP addresses, device/browser information, error logs and website or account activity where recorded.
- Information and access permissions required for integrations you authorise, such as connected business social-media accounts and publishing activity.
Please supply only information necessary for the service. If you provide personal information about someone else, you must have an appropriate basis to share it. Payment providers process payment credentials through their own payment flows; do not send full card details to us through an enquiry or project brief.
2. Why and on what basis we use information
We use information to respond to enquiries, prepare quotations, deliver and maintain services, manage accounts and approvals, process orders and billing, operate authorised integrations, provide support, maintain security and meet legal or record-keeping obligations.
Processing must have an appropriate lawful basis, which may include your consent, steps requested before entering a contract, performance of a contract, a legal obligation or a legitimate interest recognised under applicable law. We seek consent where required, including for optional marketing. You may withdraw consent or opt out of marketing; this does not invalidate earlier lawful processing or prevent necessary service communications.
3. Client information handled on your behalf
Some services involve processing information for a client's business, for example website forms, client portals or social content. In those cases, the client may determine the purpose of that processing and Lux Empire acts on the client's instructions within the agreed service scope. Relevant responsibilities, permitted access and confidentiality should be addressed in the client agreement. Requests about information controlled by a client may need to be referred to that client.
4. Service providers and disclosures
Information may be shared where necessary with hosting and storage providers, payment providers such as PayFast, email or messaging services, analytics tools where used, authorised social platforms, integration providers and professional advisers. AI-assisted services may process relevant briefs or content through an AI provider; sensitive or unnecessary personal information should not be included in such briefs.
We aim to limit disclosures to what is needed for the relevant purpose and use appropriate contractual or other safeguards where applicable. Providers may process information outside South Africa; such transfers must be assessed against POPIA's applicable cross-border requirements. Their own privacy terms may also apply. We may disclose information when required by law or to establish, exercise or defend a legal right. We do not sell your personal information.
5. Storage and security
We use reasonable technical and organisational measures appropriate to the information and services, including access controls and limiting access to authorised people and providers. No online service or storage method can be guaranteed completely secure, and this policy does not claim a security certification. Keep account credentials private and contact us promptly if you suspect unauthorised access. If a security compromise occurs, we will assess it and make notifications required by applicable law.
6. Cookies, local storage and analytics
The website and Studio may use cookies or browser storage for necessary functions such as sign-in, account sessions and checkout preferences. Technical logs and analytics, where enabled, may help us understand usage, diagnose faults and improve the service. Where consent is legally required for non-essential tracking, it should be obtained before that tracking is used.
You can manage cookies and stored website data through your browser. Blocking necessary storage may affect sign-in or checkout. External payment and social platforms may use their own cookies when you visit or connect to them; their policies govern those activities.
7. Retention
We retain information only as long as reasonably necessary for the purpose for which it was collected, ongoing services, contractual obligations, resolving disputes and applicable legal, tax or accounting requirements. Retention varies by record type rather than a single fixed period. Information no longer required is deleted or de-identified where practicable; retained backups and legally required records may follow separate retention processes.
8. Your rights and requests
Subject to applicable law, you may request confirmation of information we hold about you, access, correction or deletion, object to certain processing, or withdraw consent where consent is the basis for processing. Deletion is not absolute where a lawful retention obligation or other permitted basis applies.
Use the contact form below to explain your request. We may need to verify your identity or authority before releasing or changing information, and will explain any applicable requirements or lawful limitations. You may also raise a privacy concern with South Africa's Information Regulator. This policy may be updated to reflect changes in services or information handling; the date above identifies the current version.
Contact Lux Empire
For questions about this policy or a request relating to your services or personal information, use our contact form. Include your name, contact details and the relevant project, account or payment reference. Do not send passwords or full payment-card details.