Privacy

Last updated 5 October 2026

Who is responsible for your information

BizMagic Ops is operated by Astros Marketing (Pty) Ltd, 2 Makro Place, Sunnyrock 1401, South Africa. For the purposes of the Protection of Personal Information Act, 2013 (POPIA), Astros Marketing (Pty) Ltd is the responsible party for personal information collected through bizmagic.co.za and through email to our mailbox. Our information officer can be reached at magic@bizmagic.co.za with "Privacy" in the subject line.

What we collect

We do not use web forms, so we only receive what you choose to send us. When you email us, we keep your name, email address, business name, town or city, the content of your message and any attachments you include, such as a checklist photo or a draft invoice. When you order a kit, we also keep your delivery address, a contact number for the courier, your VAT number if you supply one, and payment confirmation details. We never ask for your banking passwords, card numbers or SARS eFiling login.

When you browse the site, our hosting provider records standard server logs: IP address, browser type, the pages requested and the time of the request. We use these logs to keep the site secure and working. We do not use them to build advertising profiles.

Third-party services on the site

Pages load fonts from Google Fonts and a small assistant and WhatsApp chat widget served from am.co.za. These services may receive your IP address and browser details when the page loads. If you start a chat through the widget, the message is handled by that service and by WhatsApp under their own privacy terms. We do not set advertising cookies.

Why we use your information

• To reply to your enquiry and prepare a quote or pro forma invoice
• To deliver kits, digital files and booked Counter Hour sessions
• To keep accounting and tax records as required by law
• To send follow-up notes you have asked for, such as a session summary
• To protect the site and our mailbox against abuse and fraud

We process this information because it is needed to perform a contract with you or to take steps you asked for before a contract, because the law requires it, or because it is in our legitimate interest to run a secure business. We will only send you marketing email if you have asked for it, and every such email can be stopped with a one-line reply.

Who we share it with

We share only what is necessary with: the courier company delivering your pack; our external accountant and auditors; the companies that host our website and email; and a BizMagic supplier hub team member when you book a session at that hub. We do not sell or rent personal information. Some of our service providers store data on servers outside South Africa. Where that happens, we rely on providers that are bound by data protection laws or agreements offering protection comparable to POPIA.

How long we keep it

General enquiries that do not lead to an order are deleted after twenty-four months. Order, invoice and payment records are kept for at least five years, as required by the Tax Administration Act and the Companies Act. Server logs are kept for up to ninety days unless needed to investigate a security incident.

Your rights

You may ask us to confirm whether we hold personal information about you, to give you a copy of it, to correct it, or to delete it where we are not required to keep it. You may also object to processing and withdraw consent for marketing at any time. Send your request to magic@bizmagic.co.za and we will respond within thirty days. We may ask you to confirm your identity before releasing information.

If you are unhappy with how we have handled your information, please tell us first so we can try to put it right. You also have the right to lodge a complaint with the Information Regulator (South Africa) through its website, inforegulator.org.za.

Security and children

We use access controls, encrypted connections and limited staff access to protect personal information. No system is perfectly secure, and we will notify you and the Information Regulator if a breach affects your information, as POPIA requires. Our kits are meant for business owners and are not directed at children under eighteen.

Changes to this policy

We will update this page when our practices change and show the new date at the top. Related pages: terms and shipping and packs.