Privacy Policy

1. Who is responsible for your data

THE WAVE VIDEO MARKETING LTD, registered in England and Wales (company number 16258512) with its registered office at 10 Harlow Gardens, Kingston Upon Thames, KT1 3FF, is the controller (and, under POPIA, the responsible party) for personal data collected through thewavevideomarketing.com. Contact us about privacy at privacy@thewavevideomarketing.com.

We process personal data to meet the UK GDPR and Data Protection Act 2018, the EU GDPR, the South African Protection of Personal Information Act 2013 (POPIA), and the California Consumer Privacy Act as amended by the CPRA (CCPA).

2. Information we collect

We collect:

• Contact and enquiry data: name, email, telephone, company, job title, and anything you share in forms, bookings, and messages.
• Billing data: billing details and payment records (card data is handled by our payment processor, not stored by us).
• Usage and device data: pages visited, features used, device and browser type, and IP address.
• Cookie data: as described in our Cookie Policy.

3. How we use your data and our legal bases

We process your data under these legal bases:

• Performance of a contract: to provide our services, manage your account, and take payment.
• Legitimate interests: to improve our services, understand usage, prevent fraud, and manage our relationship with you.
• Consent: for marketing communications and non-essential cookies. You may withdraw consent at any time.
• Legal obligation: to meet tax, accounting, and regulatory duties.

4. Sharing your data

We share personal data only with service providers that host, secure, process payments for, or support the site, each bound by a data-processing agreement, with professional advisers where necessary, and with authorities where required by law. We do not sell your personal data, and we do not share it with third parties for their own marketing. For CCPA purposes, we have not sold or shared personal information in the preceding 12 months.

5. International transfers

Our infrastructure is in the United Kingdom or the European Union. Where personal data is transferred outside the UK or EEA, we rely on an adequacy decision, the UK International Data Transfer Agreement, or Standard Contractual Clauses. Transfers involving South African data meet section 72 of POPIA.

6. Data retention

We keep personal data only as long as necessary. Financial records are kept for 7 years to meet tax law. Enquiry data that does not convert is kept for up to 2 years. Marketing consent records are kept for the consent duration plus 12 months.

7. Your rights

Under the UK and EU GDPR you have the right to access, rectify, erase, restrict, and port your data, to object to processing, and to withdraw consent. Contact privacy@thewavevideomarketing.com and we respond within one month.

Under POPIA (South Africa) you also have the right to be notified that personal information is collected, to access and request correction or deletion, to object to direct marketing, and to complain to the Information Regulator at inforegulator.org.za.

Under the CCPA/CPRA (California) you have the right to know, access, correct, and delete your personal information, and to opt out of any sale or sharing. We do not sell or share personal information, so no opt-out is needed, and we will not discriminate against you for exercising your rights. You may complain to the California Privacy Protection Agency at cppa.ca.gov.

8. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, regular security review, and breach-response procedures, and we notify the relevant authority of a reportable breach within 72 hours.

9. Children

Our services are for business use and are not intended for anyone under 18. We do not knowingly collect data from children.

10. Changes and contact

We may update this policy to reflect changes in our practices or the law. The date above shows when it was last revised. For privacy questions or to exercise your rights, contact THE WAVE VIDEO MARKETING LTD at privacy@thewavevideomarketing.com, or write to 10 Harlow Gardens, Kingston Upon Thames, KT1 3FF. You may complain to the ICO (ico.org.uk), your EU data protection authority, the South African Information Regulator (inforegulator.org.za), or the California Privacy Protection Agency (cppa.ca.gov).