Privacy Policy

Yes Africa Media (Pty) Ltd | ohkarl.com | Last updated 28 March 2026

This Privacy Policy explains how Yes Africa Media (Pty) Ltd (trading as ohKarl, ‘we’, ‘us’, ‘our’) collects, uses, stores, and protects your personal information when you visit ohkarl.com, contact us, or purchase our products and services.

We are committed to protecting your privacy and complying with the Protection of Personal Information Act 4 of 2013 (POPIA). Where we serve clients in the EU or UK, we additionally observe the principles of the GDPR and UK GDPR.

Please read this policy carefully. By using our website or services, you acknowledge that you have read and understood it.

1. Who We Are

Yes Africa Media (Pty) Ltd is a South African company trading as ohKarl. We are a digital agency offering SEO, AI Engine Optimisation (AEO), social media management, branding, and graphic design. We also sell downloadable digital products (guides, templates, courses) through our website.

Contact: he***@****rl.com

2. What Information We Collect

2.1 Information you provide directly

  • Name and email address via contact and enquiry forms
  • Name, billing address, and email when purchasing from our shop
  • Payment information — processed by our payment provider; we do not store card details
  • Any information you include in messages or enquiries to us

2.2 Information collected automatically

  • IP address and approximate location
  • Browser type, device type, and operating system
  • Pages visited, time on site, and referring URLs
  • Cookie identifiers (see Section 7)

2.3 Information from third parties

  • Analytics data from Google Analytics or similar tools
  • Payment confirmation data from our payment processor

3. How We Use Your Information

  • To respond to your enquiries and provide requested services
  • To process and fulfil your orders, including delivering digital downloads
  • To send transactional emails (order confirmations, receipts, download links)
  • To send marketing communications — only with your consent; you may unsubscribe at any time
  • To improve our website, services, and user experience through analytics
  • To comply with legal obligations

4. Legal Basis for Processing

  • Contractual necessity — to fulfil orders and deliver services you have requested
  • Legitimate interests — analytics, fraud prevention, and improving our services
  • Consent — for marketing communications (you may withdraw at any time)
  • Legal obligation — where required by South African law

For EU/UK residents, the equivalent GDPR lawful bases apply accordingly.

5. Sharing Your Information

We do not sell your personal information. We share it only with trusted third parties strictly under confidentiality obligations:

  • Payment processors (e.g. PayFast, Stripe, PayPal) — for secure payment handling
  • Email service providers — for transactional and marketing emails
  • Website hosting and cloud services providers
  • Analytics providers (e.g. Google Analytics) — using anonymised data where possible
  • Legal or regulatory authorities — where required by law

6. Data Retention

  • Customer purchase records: 5 years (for tax and accounting purposes under SA law)
  • Contact form enquiries: 2 years
  • Marketing consent records: until consent is withdrawn, plus 1 year
  • Website analytics data: typically 26 months (as configured in our analytics platform)

7. Cookies

Our website uses cookies to improve your browsing experience and analyse traffic:

  • Essential cookies: necessary for the website to function (cannot be disabled)
  • Analytics cookies: help us understand how visitors use the site
  • Functional cookies: remember your preferences

You can control or delete cookies through your browser settings.

8. Your Rights Under POPIA

  • Request access to the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information (subject to legal retention requirements)
  • Object to processing of your information for direct marketing
  • Lodge a complaint with South Africa’s Information Regulator

EU/UK residents have additional GDPR rights including data portability and restriction of processing.

To exercise any right, contact us at he***@****rl.com. We will respond within 30 days.

Information Regulator (SA): inforegulator.org.za | co********@***************rg.za

9. Security

We implement appropriate technical and organisational measures to protect your personal information, including SSL/TLS encryption, secure payment processing, and access controls. No internet transmission is 100% secure, but we take all reasonable precautions.

10. International Transfers

We are based in South Africa. Where we use service providers in other countries, we ensure appropriate safeguards are in place to protect your information.

11. Children

Our website and products are not directed at children under 18. We do not knowingly collect personal information from minors. Contact he***@****rl.com if you believe a child has provided us with personal information.

12. Changes to This Policy

We may update this policy from time to time. The updated version will be posted on our website with a revised date. Continued use of our website constitutes acceptance.

13. Contact

Privacy queries: he***@****rl.com | Yes Africa Media (Pty) Ltd | ohkarl.com