How ExperiaOne collects, uses and protects your information.
Effective date: 21 October 2026
This policy explains how ExperiaOne ("we", "us") handles personal information on our website, experiaone.com. We follow the South African Protection of Personal Information Act (POPIA) and, where it applies, the EU/UK General Data Protection Regulation (GDPR).
Our products (such as EngageONE, Yaffle and Compass) run on their own websites and have their own privacy policies. This policy covers experiaone.com only.
1. Who we are
ExperiaOne is operated by Experia Immersive Code, registration number 2011/127851/07, of 978 Tom Burke Street, Pretoria, South Africa.
For any privacy question or request, email hello@experiaone.com. Our POPIA Information Officer is Johan Esterhuyse, reachable at the same address.
2. What we collect
If you send us a message through our contact form, we collect:
your name, your email address and your message;
your IP address and your browser's user-agent string, stored with your message;
a record of the notice shown to you under the form — the exact wording, the version of this policy that was live, and the date and time.
When you visit any page, our hosting and security provider (Cloudflare) processes standard technical information: your IP address, browser and device details, and the pages you asked for. To stop abuse of the contact form, we keep your IP address in a temporary store for 10 minutes after you send a message. A security check (Cloudflare Turnstile) may run in your browser to confirm you are a person and not an automated program.
We do not collect special categories of personal information (such as health data), and we do not ask for any.
3. How we use it
To reply to you. This is the only reason we ask for your details.
To confirm we received your message. We send you one automatic email to say so.
To tell our team. A copy of your message goes to our team mailbox.
To keep the site secure and to stop spam and abuse.
We do not add you to a mailing list, we do not send you marketing, and we do not sell your information. We do not send your message to any AI service.
4. Legal basis
We process your contact details because you asked us to reply (steps taken at your request) and because we have a legitimate interest in keeping the site secure. We do not rely on consent for this, and we do not use your details for anything else.
5. Who we share it with
We share information only with the providers who run the site for us:
Cloudflare — hosting, security, the database and file storage, the bot check, and sending our emails.
Google — our team mailbox (hello@experiaone.com) runs on Google Workspace, so the copy of your message that reaches our team is held there. Our staff also use Google to sign in to the site's admin area.
We may also disclose information where the law requires it, or to protect our rights or someone's safety.
6. International transfers
Cloudflare and Google operate outside South Africa, including in the United States and the European Union. Where information crosses borders, we rely on providers that give recognised safeguards, such as standard contractual clauses, to keep it protected to a standard consistent with POPIA.
7. How long we keep it
Your message and contact details — for as long as we need them to deal with your enquiry, and after that until you ask us to delete them. We review older messages once a year. You can ask us to delete your message at any time, and we will.
The notice record — for as long as we keep your message, so we can show what you were told. When your message is deleted, the record is deleted too.
The anti-abuse IP record — 10 minutes.
8. Cookies
Visitors to our website get no cookies from us today. We do not use advertising cookies, and we do not track you across other websites.
Our staff get a sign-in cookie (sid, 7 days) and two short-lived sign-in cookies (oauth_state and oauth_next, 10 minutes). These are used only in the admin area.
If we ever turn on website statistics (Google Analytics), we will ask you first. Nothing will load until you say yes, and your choice will be stored in the cookie experione_consent for 180 days. See our Cookie Policy.
9. How we protect it
Information is encrypted in transit (HTTPS). Only named ExperiaOne staff can sign in to the admin area, using their Google accounts. No system is completely secure. If a breach is likely to affect you, we will tell you and the Information Regulator, as the law requires.
10. Children
This site is for businesses. We do not knowingly collect information from anyone under 18. If you think a child has sent us their details, email us and we will delete them.
11. Your rights
You may ask us for a copy of your personal information, and you may ask us to correct it, delete it, or stop using it. To do so, email hello@experiaone.com.
South Africa: you may complain to the Information Regulator (South Africa).
EU/UK: you may complain to your local data-protection authority.
12. Changes to this policy
When we change this policy, we will change the effective date at the top. Each message sent through our contact form records which version of this policy was live at the time.
13. Contact us
hello@experiaone.com · Experia Immersive Code, 978 Tom Burke Street, Pretoria, South Africa · POPIA Information Officer: Johan Esterhuyse.