GDPR and Personal Data Processing

Effective date: October 29, 2026

1. About This GDPR / Processing of Personal Data Notice

This notice explains how Oculeus (Pty) Ltd handles personal data for visitors in the EU, EEA, and UK. Oculeus (Pty) Ltd uses the service brand Oculeus Consulting. It is a private company incorporated in South Africa, 22 Kruger Street, Jeppestown, Johannesburg, 2198, South Africa. Contact: [email protected]. Website: oculeusltd.com. Services are delivered remotely from South Africa to clients in the United States and internationally. For GDPR and UK GDPR purposes, Oculeus is the controller of the personal data described in this notice. See also our Privacy and Terms pages.

2. Personal Data We Collect

We collect only the data you provide or that our systems generate to run the site and respond to you.

Contact and inquiry form data: name, email address, company, message, and any details you include.
Estimate form data: contact details, service or project information, and any details you include for an estimate.
Call booking data via Zoho Bookings: name, email address, booking details, time zone, and notes you add.
Email correspondence via Zoho Mail: email address, message content, attachments, and related email metadata.
Technical and log data via Cloudflare: IP address, browser and device data, requested pages, timestamps, and security events.

We do not ask for special category data. Please do not send special category data through our forms.

3. Purposes and Lawful Bases

We use personal data for the following purposes and lawful bases under GDPR Article 6(1) and UK GDPR.

Contact and inquiry forms: to respond to your inquiry and take steps you request before a contract. Basis: Art. 6(1)(b).
Estimate forms: to prepare estimates and discuss services at your request. Basis: Art. 6(1)(b).
Zoho Bookings: to schedule, confirm, and manage calls. Basis: Art. 6(1)(b).
Zoho Mail: to respond to emails and keep business records. Basis: Art. 6(1)(b) for responding; Art. 6(1)(f) for record keeping.
Cloudflare logs: to keep the site secure, prevent abuse, diagnose issues, and maintain service reliability. Basis: Art. 6(1)(f) legitimate interests.
Optional marketing emails: to send updates or offers only with consent. Basis: Art. 6(1)(a). You can withdraw consent at any time.
Legal obligations: to keep records or disclose data where law requires. Basis: Art. 6(1)(c).

Where we rely on legitimate interests, we balance our interests against your rights and expectations. We use security logs and records to protect our services and business.

4. Processors and Recipients

We use service providers to run our site and respond to you. They act as processors under our instructions, except where law requires otherwise.

Web3Forms: processes contact and estimate form submissions.
Zoho: Zoho Bookings for call scheduling and Zoho Mail for email.
Cloudflare: hosting, security, and standard technical logs.

We may also use professional advisers or authorities where law requires. We do not sell your personal data. We do not share it for cross-context behavioral advertising. We do not use advertising cookies.

5. International Transfers

Our services are delivered remotely from South Africa. Personal data may be processed in South Africa, the United States, and other countries where we or our processors operate. These countries may not have the same data protection laws as your country. For transfers from the EU/EEA or UK, we rely on appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions where available. We confirm the relevant safeguards with each provider.

6. Retention

We keep personal data only as long as needed for the purposes in this notice. This includes responding to you and keeping a reasonable business record. We keep personal information only as long as needed for the purpose it was collected for, such as answering an inquiry or delivering an engagement, and to meet legal, tax and accounting obligations, and then delete or anonymise it. We keep optional marketing data until you withdraw consent. We may keep data longer where law requires or to establish, exercise, or defend legal claims.

7. Your Rights

If GDPR or UK GDPR applies, you have the right to:

access your personal data;
rectify inaccurate or incomplete data;
erase data in certain cases;
restrict processing in certain cases;
data portability;
object to processing based on legitimate interests;
withdraw consent at any time, without affecting lawful processing before withdrawal;
not be subject to a decision based solely on automated processing that has legal or similarly significant effects.

You also have the right to complain to a supervisory authority. This can be the authority in your EU/EEA member state or the UK Information Commissioner’s Office (ICO). We ask that you contact us first so we can try to resolve your concern.

8. How to Exercise Your Rights

Email [email protected] to exercise your rights. Please describe your request and the data involved. We may need to verify your identity. We respond within one month. If we cannot meet that deadline, we will tell you why and when we will respond, where law allows.

For requests under South Africa’s Protection of Personal Information Act (POPIA):

Information Officer: contact [email protected]

9. EU Representative

We have no establishment in the EU or UK and have not appointed an EU or UK representative. You can contact us directly about any data protection matter at [email protected].

10. Cookies and Other Links

We do not use advertising cookies. Cloudflare may set strictly necessary security cookies to protect the site and prevent abuse. For more about data handling, see Privacy and Terms. For this notice, see GDPR. To contact us, see Contact.

GDPR / Processing of Personal Data