Privacy policy

This site is run by MJ Steenberg, trading as Recurra, in Cape Town, South Africa ("I", "me"). I'm the responsible party under South Africa's Protection of Personal Information Act (POPIA) and the controller under the EU's GDPR for anyone contacting me from Europe.

What I collect

• What you type into a form: your name, email, website, and anything else you choose to tell me (for example, monthly sales or your booking system).
• How you found the page: campaign tags in the link you clicked (such as utm_source) and the page URL, so I know which channels work.

Cookies and tracking

When you first visit, you're asked whether to accept cookies. Your choice is saved in your browser.

• If you accept: Google Analytics 4 measures how the site is used, and the Meta Pixel tells me which Facebook and Instagram ads bring visitors and enquiries (for example, that someone requested an audit, or watched part of the video). When you submit a form, I may also send Meta a secured (hashed) copy of your name, email address and phone number, plus a random visitor ID stored in your browser, so the enquiry can be matched to the ad you saw. Meta can't read these hashed values; they're only used for matching.
• If you decline: the Meta Pixel doesn't load and nothing is sent to Meta. Google Analytics only receives anonymous, cookie-free counts (no identifiers).

You can change your mind at any time by clearing this site's data in your browser; you'll be asked again on your next visit. The site loads no third-party fonts.

Why I use it

• To reply to you and deliver what you asked for (an audit, a demo, a mentorship reply).
• For an audit or demo, I also look at publicly available information about your business, such as your website and Google Business profile.

The legal basis is your request (taking steps at your request before a contract) and my legitimate interest in replying to business enquiries. I don't sell your information, and I don't add you to a newsletter.

Where it goes

Enquiries are stored in my database provider (Supabase) and emailed to my business inbox (via Resend). If you accepted cookies, Google (Analytics) and Meta (Pixel and Conversions API) receive the data described above. Some of these providers store data outside South Africa and the EU. I only use providers with appropriate safeguards.

How long I keep it

Up to 12 months after our last contact unless we work together, in which case I keep it for as long as the law requires for business records.

Your rights

You can ask me to show you, correct or delete what I hold about you, or object to how I use it. Email mjsteenberg01@gmail.com. If you're not happy with my answer, you can complain to South Africa's Information Regulator (inforegulator.org.za), or, in the EU, to your local data protection authority.