Privacy Policy
Last updated: April 2026Who we are
Duly Noted is a digital marketing consultancy based in Johannesburg, South Africa. When we refer to "we", "us" or "our" in this policy, we mean Duly Noted.
Scope and legal basis
This policy applies to all visitors of dulynoted.agency. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) and the Privacy and Electronic Communications Regulations (PECR) where applicable. Where we process personal data, our lawful basis is legitimate interest (to respond to enquiries and improve our website) or consent (for analytics and marketing cookies).
Applicable law
This policy applies to all visitors of dulynoted.co.za. We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA).
Information we collect
We collect personal information that you voluntarily provide when you submit a form on our website, including your name, email address, phone number, company name and message content. We also collect standard web analytics data through Cloudflare Zaraz (our edge-side tag management platform) and Google Analytics, including pages visited, time on site, device type and approximate geographic location.
How we use your information
We use the information you provide to respond to your enquiry, assess whether we can help with your requirements, and communicate with you about our services. Analytics data is used to understand how visitors use our site and to improve the user experience. We do not sell, rent or share your personal information with third parties for their marketing purposes.
Lawful basis for processing
Under the GDPR and UK GDPR, we rely on the following lawful bases for processing your personal data:
Consent — for setting analytics and marketing cookies. You can manage your preferences at any time via the cookie consent banner or by contacting us.
Legitimate interest — to respond to enquiries submitted through our contact forms, to protect against spam, and to maintain the security of our website.
Contractual necessity — where we process data to fulfil a service agreement with you or your organisation.
Third-party services
Our website uses the following third-party services that may collect and process data according to their own privacy policies:
Analytics: Google Analytics 4 (web analytics and audience measurement), Microsoft Clarity (session recording and heatmaps), Ahrefs Analytics (SEO performance analytics).
Advertising and conversion tracking: Meta Pixel (Facebook and Instagram advertising), Google Ads (conversion tracking), LinkedIn Insight Tag (conversion tracking and professional audience analytics).
Form processing: Formspree (processes form submissions including name, email, phone and message content).
Infrastructure: Cloudflare (content delivery, security and edge computing — processes IP addresses and request headers).
All analytics and advertising tags are managed via Cloudflare Zaraz, which runs at the network edge rather than in your browser, reducing the data exposed to third parties.
Cookies and tracking technologies
Our website uses cookies and similar technologies categorised as follows:
Essential cookies — required for the website to function correctly, including Cloudflare security cookies and session management. These do not require consent.
Analytics cookies — used by Google Analytics 4, Microsoft Clarity and Ahrefs to understand how visitors use our site. These help us measure page views, session duration, scroll depth and other usage patterns.
Marketing cookies — used by Meta Pixel, Google Ads, LinkedIn Insight Tag and our attribution cookie to track advertising conversions and enable remarketing. Our attribution cookie (_dn_attr) captures UTM parameters and click identifiers (gclid, fbclid, msclkid, li_fat_id) to attribute enquiries to their marketing source.
On dulynoted.agency, analytics and marketing cookies are only set after you provide consent via our cookie consent banner. You can change your preferences at any time by clicking the cookie settings link in the footer or by contacting us.
You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies or delete cookies that have already been set.
Data retention
We retain personal information submitted through our forms for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Analytics data is retained according to the retention settings configured in each analytics platform (typically 14 months for Google Analytics). You may request deletion of your data at any time by contacting us.
International data transfers
Some of our third-party service providers (including Google, Meta, Microsoft and LinkedIn) process data outside the UK and European Economic Area. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission and UK International Data Transfer Agreements (IDTAs), or the service provider's participation in recognised data protection frameworks.
Your rights
Under the Protection of Personal Information Act (POPIA), you have the right to request access to, correction of, or deletion of your personal information held by us. You also have the right to object to the processing of your personal information and to lodge a complaint with the Information Regulator (South Africa). To exercise any of these rights, please contact us at the details below.
Under the GDPR and UK GDPR, you have the following rights in relation to your personal data:
Right of access — you can request a copy of the personal data we hold about you.
Right to rectification — you can ask us to correct inaccurate or incomplete data.
Right to erasure — you can ask us to delete your personal data where there is no compelling reason for its continued processing.
Right to restrict processing — you can ask us to suspend processing of your personal data in certain circumstances.
Right to data portability — you can request a machine-readable copy of data you have provided to us.
Right to object — you can object to processing based on legitimate interest.
Right to withdraw consent — where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us at the details below. We will respond within one month of receiving your request. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK or your local supervisory authority in the EU.
Changes to this policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. Your continued use of the website after changes are posted constitutes acceptance of those changes.
Contact
If you have questions about this privacy policy or wish to exercise your data rights, please contact us at [email protected].
You may also contact the Information Regulator (South Africa) at inforegulator.org.za.
If you are based in the UK, you may also contact the Information Commissioner's Office (ICO) at ico.org.uk. EU residents may contact their local data protection authority.