LEGAL DISCLOSURE • DATA GOVERNANCE

Privacy Policy &
POPIA Compliance.

Last updated: September 2026. Zaki SMMA operates in strict accordance with the Protection of Personal Information Act (POPIA Act No. 4 of 2013) and global data protection standards (GDPR).

1. Introduction & Scope

Zaki SMMA (referred to herein as “the Agency”, “we”, “us”, or “our”) is a performance marketing practice headquartered in Cape Town, South Africa. This Privacy Policy governs the manner in which we collect, use, maintain, and disclose information collected from visitors of our website (zakismma.co.za) and prospective clients who submit their credentials for commercial audits.

2. Personal Information Collected

We collect personal identifying information only when voluntarily submitted through our strategy consultation forms, audit calculators, and newsletter subscriptions. This may include:

Full name, business email address, and WhatsApp/phone telephone numbers.
Company name, corporate website URL, and domain information.
Monthly advertising expenditure estimates and marketing bottleneck descriptions.
Technical IP address, device telemetry, browser type, and referrer headers collected via anonymized analytics.

3. Tracking Technologies, Cookies & Server-Side CAPI

Our website utilizes minimal, essential cookies and first-party telemetry endpoints to measure conversion rates and technical performance. Specifically:

Google Analytics 4 (GA4): Collects anonymized page interaction metrics without persistent user cross-site tracking.
Meta Conversions API (CAPI): When clients grant advertising access or complete consultation forms, data transmitted to Meta is cryptographically hashed using one-way SHA-256 encryption prior to server transmission.
No Third-Party Data Reselling: We strictly never sell, trade, or monetize client data to data brokers or third-party advertisers.

Statutory Compliance

4. South African POPIA Compliance Notice

In compliance with the Protection of Personal Information Act (POPIA), Act 4 of 2013 of the Republic of South Africa:

Lawful Basis of Processing: We process your personal data exclusively under legitimate commercial interest (preparing your requested strategy audit or answering your inbound consultation inquiry).
Data Minimization: We only collect data necessary to evaluate your business's marketing unit economics.
Data Subject Rights: You possess the absolute legal right under POPIA to request access to your personal information, request correction of inaccurate data, or demand complete deletion of your records from our systems at any time.
Cross-Border Data Flows: Where data is processed on cloud infrastructure hosted outside South Africa (e.g., Google Cloud, AWS), we ensure all hosting partners adhere to POPIA Section 72 international adequacy standards.

5. Information Officer Contact

For any queries regarding this Privacy Policy, your rights under POPIA, or to request immediate deletion of your submitted audit information, please direct your inquiry to our designated Information Officer: