Privacy policy

Last updated: 11 November 2026

This policy explains what personal information I collect when you visit nicolatweed.com, get in touch, book a call, subscribe to my emails or buy something from my shop, and how I look after it. I am Nicola Tweed, a freelance web designer and developer based in Howick, KwaZulu-Natal, South Africa, and I am responsible for the information described here.

I work with clients in South Africa and around the world, so I follow the Protection of Personal Information Act (POPIA) and, where it applies to you, the EU and UK General Data Protection Regulation (GDPR).

The information I collect

Information you give me. When you fill in a contact, enquiry or pre-consultation form, I collect your name, email address and anything you choose to tell me about your business and project. If you sign up for a free guide or my newsletter, I collect your name and email address.

Bookings. When you book a call, Calendly collects your name, email address, the time you choose and any answers to its booking questions.

Purchases. If you buy from my shop, I collect your name, email address, billing details and order history. Card and payment details are handled directly by Stripe, PayPal or Payfast and are never stored on my website.

Information collected automatically. With your consent, Google Analytics collects information about how you use the site, such as the pages you visit, the device and browser you use, and your approximate location. My hosting and security tools also log IP addresses to keep the site safe from spam and attacks.

How I use your information

I use your information to reply to your enquiries, run discovery calls and quote for projects, deliver the work or products you have paid for, send the free resources and emails you asked for, keep the website secure, and understand which pages are useful so I can improve them.

I only send marketing emails if you have signed up for them, and every email has an unsubscribe link. I do not sell, rent or trade your personal information.

Why I am allowed to use it

I process your information because you have given consent (for example, to receive emails or analytics cookies), because I need it to provide a service or product you have asked for, because I have a legitimate interest in running and protecting my business, or because the law requires me to keep certain records, such as invoices.

Who I share it with

I use trusted service providers to run my business. They only receive what they need to do their job:

MailerLite (email newsletters and sign-ups), Calendly (call bookings), Google (Analytics, Site Kit and Workspace email), Stripe, PayPal and Payfast (payments), SMTP2GO (sending website emails), my web host, and backup and security tools such as UpdraftPlus, Kadence Security, Really Simple Security and Akismet.

Some of these providers store data outside South Africa, including in the United States and the European Union. When that happens, I rely on providers that offer adequate protection for your information, as POPIA and the GDPR require.

Cookies

The site uses cookies to remember your preferences, keep your basket working and, with your permission, measure how visitors use the site. When you first visit, CookieYes asks which cookies you are happy to accept, and you can change your choice at any time. Embedded YouTube videos may also set cookies when you play them. You can read more in my cookie policy.

How long I keep it

I keep enquiry details for as long as we are in touch and for up to two years afterwards, in case you come back to me. Client and order records, including invoices, are kept for five years to meet South African tax requirements. Newsletter subscribers stay on my list until they unsubscribe.

Keeping it safe

The site runs over a secure HTTPS connection, is backed up regularly and is protected by security and spam filtering tools. Access to client information is limited to me. No system is completely secure, but I take reasonable steps to protect your information from loss, misuse and unauthorised access.

Your rights

You can ask me to tell you what personal information I hold about you, correct it, delete it, or stop using it for marketing. You can also object to how I use it or withdraw your consent at any time. To do any of these, email me at hello@nicolatweed.com and I will respond within 30 days.

If you are not happy with how I have handled your information, you can complain to the Information Regulator of South Africa at inforegulator.org.za, or to the data protection authority in your own country.

Children

This website is meant for business owners and is not aimed at anyone under 18. I do not knowingly collect information from children.

Changes to this policy

I may update this policy as my website and services change. The date at the top shows when it was last updated.

Contact

If you have any questions about this policy or your information, email me at hello@nicolatweed.com.