Legal
Privacy & Cookie Policy
How we handle personal information when you visit khulula.audio or get in touch with us, in line with the Protection of Personal Information Act, 2013 (POPIA).
Effective 26 August 2026 · Version 1.0
Who we are
Mill Information Services CC, trading as Khulula Audio, is the responsible party for the personal information described here.
| Registration | 1992/005362/23 |
|---|---|
| VAT number | 4400142651 |
| Address | Pinelands, Cape Town, Western Cape, South Africa |
| sales@khulula.audio | |
| Telephone | +27 60 835 2037 |
| Information Officer | Frank David Spencer · sales@khulula.audio |
Contacting the Information Officer
Frank David Spencer is the appointed Information Officer for Mill Information Services CC. Requests about your personal information, including access, correction or deletion, should be addressed to him at sales@khulula.audio, marked for the attention of the Information Officer.
What we collect, and when
When you browse the site
The website is a single page of static content. It has no login, no shopping cart and no customer database. We do not ask you for anything as you browse, and nothing you type is sent anywhere until you choose to submit the enquiry form.
Our hosting provider keeps standard server logs, which record your IP address, browser type and the pages requested. These are generated by the web server itself and are used for security and troubleshooting.
When you send an enquiry
When you complete the enquiry form and press send, the details are transmitted to our web server and forwarded to us by email through Brevo, our email provider. We keep no separate copy on the website itself.
We receive whatever you included — typically your name, business name, email address, telephone number and what you are enquiring about. Your details are also stored in our contact records at Brevo so we can manage the enquiry and see its history if you contact us again. The same applies if you contact us by WhatsApp, by telephone, or by email directly.
Marketing, only if you ask for it
The enquiry form carries a tick box asking whether you would like news about new products, demos and offers. It is not ticked by default. If you leave it alone we will only ever contact you about the enquiry you sent, and you are added to no mailing list.
If you do tick it, we record that you agreed and the date you agreed, and we add you to our mailing list. You can change your mind at any time using the unsubscribe link in any email we send, or by writing to us. Unsubscribing takes effect immediately and does not affect our ability to answer your enquiries.
When you receive our marketing emails
If you have given us your address for marketing, we send campaigns through Brevo. Those emails record whether a message was opened and which links were clicked, using tracking addresses on the subdomains r.mail.khulula.audio and img.mail.khulula.audio. Every campaign carries an unsubscribe link, and unsubscribing takes effect immediately.
Cookies and similar technologies
A cookie is a small file a website stores in your browser. We use as few as possible, and none at all unless you agree to them.
Advertising and measurement — only with your consent
We use the Meta Pixel to understand whether our Facebook and Instagram advertising is working. The pixel does not load until you accept it in the notice shown on your first visit. If you decline, or simply ignore the notice, nothing is set and no data goes to Meta.
If you accept, the following are stored in your browser:
| Name | Type | Purpose | Expires |
|---|---|---|---|
_fbp | Cookie | A randomly generated identifier that lets Meta recognise the same browser across visits | 90 days |
_fbc | Cookie | Set only if you arrive by clicking one of our adverts. Records the advert click so Meta can attribute the visit | 90 days |
lastExternalReferrer | Local storage | Records which website sent you to us | Until cleared |
lastExternalReferrerTime | Local storage | When that referral happened | Until cleared |
_gcl_au | Cookie | Set only while we are running Google advertising, so Google can tell which advert led to an enquiry | 90 days |
Meta may combine this with information it already holds about you, including your Facebook or Instagram account if you have one. Meta’s own terms govern what it does with that data.
Website analytics — only with your consent
We use Google Analytics to understand how many people visit, which parts of the site they read, and whether our advertising brings anyone here. It loads only after you accept.
| Name | Type | Purpose | Expires |
|---|---|---|---|
_ga | Cookie | Distinguishes one visitor from another | 2 years |
_ga_185GC1L5NB | Cookie | Keeps track of a single visit to our site | 2 years |
We record when someone completes an enquiry or opens WhatsApp from the site, so we can tell which pages and adverts lead to contact. We do not send Google your name, email address or telephone number.
Remembering your choice
Whichever option you pick, we store a single entry, kh-consent, in your browser so we do not ask again on every page load. It holds only the word “accepted” or “declined” and the date. It contains nothing that identifies you, and it is never sent anywhere.
Changing your mind
You can change your decision at any time using the Cookie settings link at the bottom of every page. If you decline after previously accepting, we delete the advertising cookies described above. Clearing your browser’s site data for khulula.audio also removes everything described above.
Fonts
Our pages use a typeface served by Google Fonts. Loading it discloses your IP address to Google, which is unavoidable for any externally hosted font. Google states that it does not use Google Fonts requests to build advertising profiles, and no cookies are set by the font service.
Why we use your information
| Purpose | Information used | Our basis under POPIA |
|---|---|---|
| Answering your enquiry, quoting, and keeping a record of it | Name, business, email, telephone, what you asked about | Steps toward concluding a contract with you |
| Supplying products and after-sales support | Contact and order details | Performance of a contract |
| Keeping accounting and tax records | Transaction records | Compliance with a legal obligation |
| Marketing emails to people who asked for them | Name and email address | Consent, given by ticking the box on the enquiry form, withdrawable at any time |
| Measuring our advertising | Pixel identifiers described above | Consent, withdrawable at any time |
| Keeping the website secure | Server log data | Our legitimate interest in protecting the site |
Who else handles your information
We do not sell your personal information. We share it only with service providers who process it on our behalf, known under POPIA as operators.
| Provider | What they do for us | Where |
|---|---|---|
| Cybersmart | Website hosting, server logs, and processing enquiry form submissions | South Africa |
| Microsoft 365 | Our business email | Outside South Africa |
| Brevo | Delivering enquiry form submissions to us, and sending marketing emails | European Union |
| Meta Platforms | Advertising measurement, only if you consent | Outside South Africa |
| Serving the website typeface, website analytics, and advertising measurement while we are running Google adverts | Outside South Africa |
We may also disclose information where the law requires it, or to establish or defend a legal claim.
Information sent outside South Africa
Several of the providers above operate outside South Africa, so your information may be processed in other countries. Section 72 of POPIA permits this where the recipient is subject to laws or binding agreements giving comparable protection. Microsoft, Meta, Google and Brevo each publish data protection terms intended to meet that standard, and Brevo operates under the European Union’s General Data Protection Regulation.
How long we keep it
| Enquiries that do not lead to a sale | 12 months from our last contact with you, then deleted |
|---|---|
| Customer and transaction records | Five years from the end of the tax year, as required by the Tax Administration Act |
| Marketing list | Until you unsubscribe, or after 12 months of no engagement |
| Server logs | As retained by our host, typically a short rolling period |
| Pixel identifiers | 90 days in your browser, then they expire |
Keeping it secure
Our website is served over an encrypted HTTPS connection. Business email and records are held in Microsoft 365 with access limited to people who need it. No system is perfectly secure, but where a breach is likely to cause you harm we will notify you and the Information Regulator as POPIA requires.
Your rights
Under POPIA you may:
- Ask what personal information we hold about you, and receive a copy
- Ask us to correct anything inaccurate, or delete anything we no longer have grounds to keep
- Object to us using your information for direct marketing
- Withdraw consent at any time, including for the advertising pixel
- Complain to the Information Regulator if you are not satisfied with our response
Write to sales@khulula.audio and we will respond within a reasonable period. We may need to confirm your identity first, so that we do not disclose someone’s information to the wrong person.
Complaints to the Regulator
If you are not satisfied with how we have handled your personal information, you may complain to the Information Regulator (South Africa), which oversees both POPIA and PAIA.
Personal information (POPIA):
POPIAComplaints@inforegulator.org.za
Access to information (PAIA):
PAIAComplaints@inforegulator.org.za
Website: inforegulator.org.za
We would ask that you raise the matter with us first, so we have the chance to put it right.
Children
Our products are sold to businesses and adult consumers. We do not knowingly collect information about anyone under 18. If you believe a child has sent us personal information, contact us and we will delete it.
Changes to this policy
If we change how we handle personal information we will update this page and revise the effective date above. Material changes affecting how we use information you have already given us will be communicated directly where we can.