Legal
Privacy Policy
01 Who We Are
Art & Science based Marketing is an AI content production and Meta advertising studio based in Cape Town, South Africa, operating worldwide. We produce AI-generated product videos, UGC-style ad creatives, and studio photography, and manage Meta advertising campaigns for brands and businesses.
For the purposes of this policy, "we," "us," and "our" refers to Art & Science based Marketing, operated by Winston Gliddon.
Data controller: Winston Gliddon · Art & Science based Marketing
Email: artandsciencebasedmarketing@outlook.com
Location: Cape Town, South Africa
02 What Information We Collect
We collect information in two ways: information you provide directly to us, and information collected automatically when you use our website.
Information you provide:
| Information | How collected | Why |
|---|---|---|
| Name | Contact form | To address you correctly |
| Email address | Contact form | To respond to your enquiry and manage your project |
| Brand / business name | Contact form | To understand your project context |
| Project brief details | Contact form | To scope and deliver your project |
| Ad budget range | Contact form | To recommend the right service plan |
| Product images & brand assets | Google Drive upload | To produce AI-generated content for your brand |
| Personal images / likeness | Google Drive upload (where applicable) | To train AI models on your likeness — requires signed consent form |
| Payment information | PayPal Business (third party) | To process project payments |
Information collected automatically:
- Standard server logs including IP address, browser type, and pages visited — collected by Netlify (our hosting provider) as part of standard web hosting
- If we add analytics tools in future (such as Google Analytics), this policy will be updated and a cookie notice will be displayed
We do not currently use tracking cookies, advertising pixels, or analytics software on this website.
03 How We Use Your Information
We use your information only for the purposes for which it was collected:
- To respond to your project enquiry within 24 hours
- To prepare, confirm, and deliver your project scope
- To produce AI-generated content using your provided brand assets
- To set up and manage Meta advertising campaigns on your behalf (Launch and Grow plans)
- To send project-related communications — delivery confirmations, revision requests, monthly reports
- To process payment via PayPal Business
- To comply with our legal obligations
We do not use your information for unsolicited marketing. We do not sell, rent, or share your personal information with third parties for their own marketing purposes.
04 Legal Basis for Processing
Under the GDPR (for individuals in the European Economic Area) and POPIA (for individuals in South Africa), we rely on the following legal bases:
| Processing activity | Legal basis |
|---|---|
| Responding to your enquiry | Legitimate interest / pre-contractual steps |
| Delivering your project | Performance of a contract |
| AI training on personal likeness | Explicit consent (signed consent form) |
| Processing payment | Performance of a contract |
| Sending project communications | Legitimate interest / contract performance |
| Retaining records | Legal obligation / legitimate interest |
05 Data Storage & Retention
Where your data is stored:
- Project enquiries are received via Netlify Forms and stored in our Netlify account
- Client assets and project files are stored in private, access-controlled Google Drive folders — not publicly accessible
- Payment records are held by PayPal Business
- Email correspondence is held in our Outlook account
How long we keep it:
| Data type | Retention period |
|---|---|
| Source images & brand assets | Deleted within 30 days of final project delivery |
| Signed consent forms (personal likeness) | Retained for minimum 2 years from project completion |
| Project correspondence & scope confirmations | Retained for 2 years from project completion |
| Payment records | Retained for 7 years (legal / tax requirement) |
| Delivered outputs (your final files) | Retained in your Google Drive delivery folder — not deleted |
| Enquiry form submissions (non-converting) | Deleted after 6 months of inactivity |
We will send you written confirmation when your source assets have been deleted. If you request earlier deletion, we will action it within 7 days.
06 Third Parties We Work With
We share limited data with the following third parties, strictly for the purpose of delivering our services:
| Service | Purpose | Data shared |
|---|---|---|
| Netlify | Website hosting & form processing | Enquiry form data, server logs |
| Google Drive | File storage & delivery | Project files and assets (private folders) |
| PayPal Business | Payment processing | Name, email, payment amount |
| Meta (Facebook/Instagram) | Ad campaign management (Launch & Grow plans) | Access to your Meta Business account — no personal data transferred to Meta on your behalf without your consent |
| RunPod / AI training infrastructure | AI model training (where applicable) | Brand assets only — processed and deleted per project |
We do not share your data with any other third parties without your explicit consent. We do not use data brokers, advertising networks, or retargeting services on our website.
07 Meta Advertising Campaigns
For clients on our Launch and Grow plans, we manage paid advertising campaigns on Meta platforms (Facebook and Instagram) on your behalf.
- We access your Meta Business Manager account using the access level you grant us
- Your account, your ad spend, and your campaign data remain yours at all times — we are operators, not owners
- We do not install Meta Pixel or any tracking code on your website without your explicit instruction and consent
- Ad performance data (impressions, clicks, conversions, ROAS) is used solely to optimise your campaigns and produce your monthly report
- We do not use your campaign data for any other client or purpose
Meta's own privacy practices are governed by Meta's Privacy Policy.
08 Your Rights
Depending on where you are located, you have some or all of the following rights regarding your personal information:
To exercise any of these rights, email artandsciencebasedmarketing@outlook.com. We will respond within 30 days. We may need to verify your identity before actioning a request.
If you are in South Africa and believe your rights under POPIA have been violated, you may lodge a complaint with the Information Regulator of South Africa at justice.gov.za/inforeg. If you are in the EU/EEA, you may contact your local data protection authority.
09 Cookies & Tracking
This website does not currently use cookies, tracking pixels, or analytics software. No consent banner is displayed because no tracking is active.
If we introduce analytics (such as Google Analytics 4) or advertising pixels in future, we will update this policy and display a cookie consent notice before any tracking begins.
Our hosting provider (Netlify) may collect standard server access logs as part of normal hosting operations. These logs are not used for advertising or sold to third parties.
10 Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete it without delay.
We will not produce AI-generated content depicting minors under any circumstances.
11 Security
We take reasonable technical and organisational measures to protect your personal information, including:
- HTTPS encryption on this website (enforced via Netlify and our
_headersconfiguration) - Private, access-controlled Google Drive folders for client files
- No public sharing of client assets or project files
- Access to client Meta Business accounts limited to campaign management only
No method of transmission over the internet is 100% secure. While we use commercially reasonable measures to protect your data, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights, we will notify you as required by applicable law.
12 Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated effective date. If changes are material, we will notify active clients by email. Continued use of our services after changes are posted constitutes acceptance of the updated policy.
13 Contact Us
For any questions about this policy or to exercise your rights, contact us at:
Art & Science based Marketing
Operated by Winston Gliddon
Cape Town, South Africa
Email: artandsciencebasedmarketing@outlook.com
Website: artandsciencebasedmarketing.com
We aim to respond to all privacy-related enquiries within 5 business days.