KMP-2026-10-31-v3 / Legal information

Privacy Policy

Version KMP-2026-10-31-v3 · Last updated 31 October 2026.

KISS MY PIXEL (Pty) Ltd, registration 2024/763508/07, trades as Kiss My Pixel, based in South Africa and serving clients worldwide. Address: 22 Karee Street, Irene, Centurion, 0157, South Africa. Director/privacy contact: Mighael Basson, mig@kiss-my-pixel.com. Please direct privacy and information-access enquiries to this contact.

We receive names, email/business details, order references, packages, briefs, public website/social links, files and correspondence from customers, their authorised representatives, Tally and Whop. Files may include logos, photos, video, voice, talent permissions and brand guides. We may view the public pages supplied for project research. Whop processes payment/billing/account information; we receive order/customer information needed for the service, not full card details through our static website. Providers may collect IP addresses, browser, device and security metadata. Only provide another person's information with appropriate authority and notice.

We use relevant data to answer enquiries, verify orders, scope/deliver work, obtain approvals, communicate, resolve complaints/refunds, prevent abuse and maintain necessary records. Grounds vary: requested pre-contract steps, contract performance, legal obligations, legitimate interests subject to applicable rights, or consent where required. Mandatory brief fields are marked; missing essentials may prevent production. Optional asset links/uploads and website fields may be left blank when irrelevant. Project submission is not marketing consent. We do not sell personal information or use it for cross-context behavioural advertising in the current website workflow.

Tally handles briefs and uploads; Whop handles checkout, customer access, payment records and private support; Titan handles business email. KMP may use Google Gemini and Google Veo video tools, OpenArt and CapCut for relevant creative production. Veo may be accessed through different products and providers; actual processing terms depend on that route. Not every provider receives every project. Access is limited to what is necessary for the project and legitimate administration. The processing of confidential or identifiable-person material depends on the relevant product, account settings and applicable arrangements. Contact us before supplying material that requires restricted processing. Material new uses or providers will be assessed, disclosures updated and any required permission obtained. Disclosures may also be necessary for lawful requests, accounting, security or legal claims.

AI services may retain, review or use material as permitted by their applicable account terms/settings. We do not claim an unverified no-training, zero-retention or private-processing guarantee. Do not send credentials, full payment details, identity documents, special-category information or confidential third-party data in the general brief. Contact us for a restricted workflow before sending sensitive, unreleased or identifiable voice/likeness material. We use only the personal information reasonably needed for the project and seek to minimise or redact unnecessary data. We do not use private client material to train our own models without separate agreement. A real person's voice/likeness release and lawful provider transfer are separate from a general service acknowledgement. Uploading to a form does not authorise public portfolio display.

Providers may process outside South Africa, including Europe and other countries in their notices/contracts. Tally states form data is stored in Europe. We must assess POPIA transfer conditions and other applicable safeguards before relevant transfers; contractual necessity or consent is not assumed to solve every transfer. Where another privacy law applies, additional agreements or transfer mechanisms may be necessary. Customers can ask about the providers used for their project and raise restrictions before production.

We retain personal information only for necessary delivery, support, legal records and disputes, with periodic review. Tally submissions currently require manual retention management. Tax/legal holds may require longer retention; then restrict use/access to that purpose. On deletion requests we explain any lawful reason to retain particular records. Provider backups and independently controlled payment records may follow their own schedules. We do not promise indefinite asset recovery or guaranteed deletion from every provider instantaneously.

Our security measures include provider-hosted checkout/forms and account access controls. Access and sharing must be limited to the purposes described here. Accounts and provider settings require ongoing management; no system is completely secure. Private response/file links should not be posted publicly. Staff/contractors must report suspected incidents promptly; KMP assesses containment and any regulator/data-subject notification obligations without assuming a contractual delay overrides law. Report concerns to mig@kiss-my-pixel.com. Do not send identity evidence until a suitable verification channel is agreed.

The present static KMP site includes no advertising pixels or third-party analytics scripts. Hosted Whop and Tally pages have their own technologies and notices. Hosting and service providers may process technical/security logs under their applicable arrangements. Any additional tracking requires assessment and the legally required notice and choices before non-essential tracking is used. This policy does not silently authorise future tracking or third-party marketing.

Depending on applicable law, you may request confirmation/access, correction, deletion, restriction, portability, objection or withdrawal of consent, subject to lawful exceptions. Withdrawal does not invalidate earlier lawful processing. Rights requests receive a response within applicable legal periods and proportionate identity verification only where necessary. Contact Mighael Basson at mig@kiss-my-pixel.com. You may complain to South Africa's Information Regulator at https://inforegulator.org.za/ or an applicable authority where you live. We do not use the creative brief for solely automated decisions with legal or similarly significant effects.

KMP controls its own order, accounting and relationship records. When processing personal data solely on a business client's documented instructions, the parties should agree a project-specific data-processing schedule identifying roles, purposes, data, security, authorised subprocessors, transfers, incident assistance and deletion/return. Calling KMP a processor does not determine every legal role. A general privacy notice is not a substitute for that schedule.

Orders are intended for adults/authorised organisations. Do not submit children's personal data or images without prior agreement and the legally required authority/safeguards. Our standard brief does not enrol anyone in marketing. Any marketing permission must be separately optional, with an effective opt-out and applicable direct-marketing rules respected.

Relevant notices: https://tally.so/help/privacy-policy · https://whop.com/privacy/ · https://support.titan.email/hc/en-us/articles/360038535773-Titan-Privacy-Policy · https://support.google.com/gemini/answer/13594961 · https://openart.ai/privacy/ · https://www.capcut.com/trust/privacy . Product/account-specific agreements may differ. Material changes will be notified where required. Contact us for questions about this notice or the handling of your information.