Privacy Policy

Who we are
iD8 Rocks cc
Our website address is:

iD8 Rocks is a digital agency based in Fourways, South Africa, that provides Web Design & Development, Digital Marketing (Adwords, Google My Business, PPC etc), Hosting, and Social media marketing services.

This Privacy Policy describes how and when we collect, use, and share information when you sign up with us, contact us, or otherwise use our services through or its related sites and services.

This Privacy Policy does not apply to the practices of third parties that we do not own or control, including Xero, Google etc. You can refer to the Google and Xero Privacy Policy to learn more about its privacy practices.

iD8 Rocks and its affiliates abide by applicable privacy legislation.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

Personal Information We Collect
In order for us to provide a service to you, you must provide us with certain information such as your name, email address, postal address, payment information, and the details of the services that you’re subscribing to.

Who we share your data with
Information about our customers is important to our business. We share your personal information for very limited reasons and in limited circumstances, as follows:

Service providers. We engage certain trusted third parties to perform functions and provide services. We will share your personal information with these third parties, but only to the extent necessary to perform these services.

• Compliance with laws. We may collect, use, retain, and share your information if we have a good faith belief that it is reasonably necessary to:

(a) respond to legal process or to government requests;
(b) enforce our agreements, terms and policies;
(c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or
(d) protect the rights, property, and safety of our customers, or others.

We are required to provide your name, address, email and telephone number to domain Registrars when registering a domain in your name.

This information is not shared with anyone else, and is protected at the Registrars by ICANN privacy regulations, and is therefore not publicly available to anyone except iD8 Rocks and the Registrar.

We share your name, contact information and bank account information with our accounts system Xero. This is necessary in order to process your invoice.

How long we retain your data and use it
We retain your data for as long as you are a iD8 Rocks client plus 5 years, as required by law.

We rely on a number of legal bases to collect, use, and share your information, including:

• as needed, such as when we use your information to provide our services, to settle disputes, or to provide customer support;
• when you have provided your affirmative consent, which you may revoke at any time, such as by signing up for our mailing list;
• if necessary to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your subscriptions if required by tax law; and
• as necessary for the purpose of our legitimate interests, if those legitimate interests are not overridden by your rights or interests.

What rights you have over your data
You have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases.

We describe these rights below:

• Access. You may have the right to access and receive a copy of the personal information we hold about you by contacting us using the contact information below.
• Change, restrict, delete. You may also have rights to change, restrict our use of, or delete your personal information. Absent exceptional circumstances (like where we are required to store data for legal reasons) we will generally delete your personal information upon request.
• Object. You can object to (i) us processing of some of your information based on our legitimate interests and (ii) receiving marketing messages from us after providing your express consent to receive them. In such cases, we will delete your personal information unless we have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.
• Complain. If you reside in the EU and wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.
• You may request that we delete all data we have collected from you. It will be deleted immediately, unless we are required to store it for a period of time by South African law.

Transfers of Personal Information Outside the EU
We may store and process your information through third-party hosting services in other jurisdictions. As a result, we may transfer your personal information to a jurisdiction with different data protection and government surveillance laws than your jurisdiction.

iD8 Rocks reserves the right to amend the terms and conditions of this Privacy Policy at any time without notice. It is your duty to remain appraised of the current version of these terms and conditions.

Notwithstanding the general terms of this Privacy Policy, the collection, use, and disclosure of Personal Data iD8 Rocks may disclose Personal Data to another entity purchasing (including for diligence purposes prior to purchase) the assets of iD8 Rocks, provided that entity abides by this or a similar privacy policy.

iD8 Rocks as Operator
For the purposes of this Agreement, the parties agree that you are the Responsible Party in respect of Contact Personal Information contained within your account and as Responsible Party, you have sole responsibility for its legality, reliability, integrity, accuracy and quality.

You warrant and represent that:

1 you will comply with and will ensure that your instructions for the processing of contact personal information will comply the data protection laws;
2 you are authorised to disclose any personal information which you provide to us regarding persons other than yourself;
3 you will where necessary, and in accordance with the data protection laws, obtain all necessary consents and rights and provide all necessary information and notices to data subjects in order for

3.1 you to disclose the personal information to us;
3.2 us to process the personal information for the purposes set out in this Agreement; and
3.3 us to disclose the personal information to: (a) our agents and service providers (b) law enforcement agencies; (c) any other person in order to meet any legal obligations on us, including statutory or regulatory reporting; and (d) any other person who has a legal right to require disclosure of the information.

iD8 Rocks as Data Controller
Where, and to the extent we process your personal information as an operator in accordance with our Privacy Policy (, we shall comply with all data protection laws applicable to us as operators.

Contact Us
For more information on iD8 Rock and privacy please contact our Information Officer at:
Anthony Nutting

This policy was last updated on 2021-06-28