01Who We Are
Ahana Digital Agency is the data controller responsible for your personal data. Our head office is at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom, and we operate a regional office at V&A Waterfront, Dock Road Junction, Cape Town 8001, South Africa.
Questions about this policy or your data can be directed to sales@ahana.digital, or by telephone on +44 (0)20 3148 4620.
02Information We Collect
We collect only what is necessary to deliver our services and operate our business:
- Identity and contact data — name, business name, job title, email address and telephone number.
- Commercial data — enquiry details, campaign briefs, advertising spend ranges and ideal-customer profiles you share with us.
- Transaction data — subscription plan, billing history and payment status. Card details are processed directly by our payment provider, Stripe, and are never stored on our systems.
- Technical data — IP address, browser type, device information, pages visited and referral source, collected through cookies and analytics tools.
- Communications — correspondence, call notes and meeting records with our team.
03How We Use Your Information
We process personal data only where we have a lawful basis to do so, including:
- Performance of a contract — to provide Huntr, talent management, production and advertising services you have engaged us for.
- Legitimate interests — to respond to enquiries, prepare proposals, improve our services, and secure our platforms.
- Legal obligation — to meet accounting, tax, and regulatory requirements.
- Consent — for optional marketing communications and non-essential cookies, which you may withdraw at any time.
04Sharing Your Information
We do not sell, rent or trade personal data. We share information only with carefully selected service providers acting on our instructions — including payment processing (Stripe), customer relationship management (HubSpot), scheduling (Calendly), cloud hosting and analytics (Google Analytics) — each bound by contractual confidentiality and data-protection obligations.
We may also disclose data where required by law, to enforce our agreements, or in connection with a merger, acquisition or sale of assets, subject to equivalent protections.
05International Transfers
As a business operating across the United Kingdom, South Africa and global markets, your data may be transferred outside your home jurisdiction. Where this occurs we rely on adequacy decisions, the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or equivalent safeguards recognised under POPIA.
06Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Client and billing records are kept for six years to satisfy legal and tax obligations. Enquiry data that does not result in an engagement is deleted or anonymised within 24 months.
07Security
We apply enterprise-grade technical and organisational measures to protect your data, including encryption in transit, role-based access controls, restricted administrative access and regular security reviews. While no system is entirely immune from risk, we act promptly to contain and notify any breach as required by law.
08Your Rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request erasure of your data where there is no overriding reason to retain it.
- Object to or restrict processing, including for direct marketing.
- Request portability of data you have provided to us.
- Withdraw consent at any time, without affecting prior lawful processing.
- Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or South Africa's Information Regulator.
09Cookies
Our website uses essential cookies to function and analytics cookies to understand how visitors use our site. You can manage or disable cookies through your browser settings; disabling certain cookies may affect site functionality.
10Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be published on this page with the date of the most recent revision.